Skip to content

Commit 4a3c424

Browse files
authored
BE: Sanitize connection.uri for mongo (#285)
1 parent 38c446d commit 4a3c424

File tree

2 files changed

+5
-1
lines changed

2 files changed

+5
-1
lines changed

api/src/main/java/io/kafbat/ui/service/KafkaConfigSanitizer.java

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,8 @@ class KafkaConfigSanitizer {
3030
.add(
3131
"basic.auth.user.info", /* For Schema Registry credentials */
3232
"password", "secret", "token", "key", ".*credentials.*", /* General credential patterns */
33-
"aws.access.*", "aws.secret.*", "aws.session.*" /* AWS-related credential patterns */
33+
"aws.access.*", "aws.secret.*", "aws.session.*", /* AWS-related credential patterns */
34+
"connection.uri" /* mongo credential patterns */
3435
)
3536
.build();
3637

api/src/test/java/io/kafbat/ui/service/KafkaConfigSanitizerTest.java

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -34,6 +34,9 @@ void obfuscateCredentials() {
3434
assertThat(sanitizer.sanitize("aws.secret.access.key", "secret")).isEqualTo("******");
3535
assertThat(sanitizer.sanitize("aws.secretAccessKey", "secret")).isEqualTo("******");
3636
assertThat(sanitizer.sanitize("aws.sessionToken", "secret")).isEqualTo("******");
37+
38+
//Mongo var sanitizing
39+
assertThat(sanitizer.sanitize("connection.uri", "secret")).isEqualTo("******");
3740
}
3841

3942
@Test

0 commit comments

Comments
 (0)