summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorJesse Wilson <jessewilson@google.com>2010-10-16 09:14:34 -0700
committerAndroid Git Automerger <android-git-automerger@android.com>2010-10-16 09:14:34 -0700
commit723b2f0ba0f78bc610498372ee7441ff5fc4eea6 (patch)
tree62a234876563ce7cb6de7909437dee068639e40a
parente9a3cc7842f13b5e2b941bafc6bb3d0e9aa4c819 (diff)
parentbdd331840a37ca37136f6c030ad557750372d53f (diff)
downloadexternal_apache-http-723b2f0ba0f78bc610498372ee7441ff5fc4eea6.zip
external_apache-http-723b2f0ba0f78bc610498372ee7441ff5fc4eea6.tar.gz
external_apache-http-723b2f0ba0f78bc610498372ee7441ff5fc4eea6.tar.bz2
am bdd33184: am d5b79c97: am 9f7b511f: Don\'t leak sensitive information when logging cookies.
Merge commit 'bdd331840a37ca37136f6c030ad557750372d53f' into dalvik-dev * commit 'bdd331840a37ca37136f6c030ad557750372d53f': Don't leak sensitive information when logging cookies.
-rw-r--r--src/org/apache/http/client/protocol/ResponseProcessCookies.java24
1 files changed, 21 insertions, 3 deletions
diff --git a/src/org/apache/http/client/protocol/ResponseProcessCookies.java b/src/org/apache/http/client/protocol/ResponseProcessCookies.java
index 0689e93..5b76550 100644
--- a/src/org/apache/http/client/protocol/ResponseProcessCookies.java
+++ b/src/org/apache/http/client/protocol/ResponseProcessCookies.java
@@ -124,13 +124,17 @@ public class ResponseProcessCookies implements HttpResponseInterceptor {
cookieStore.addCookie(cookie);
if (this.log.isDebugEnabled()) {
+ // BEGIN android-changed
this.log.debug("Cookie accepted: \""
- + cookie + "\". ");
+ + cookieToString(cookie) + "\". ");
+ // END android-changed
}
} catch (MalformedCookieException ex) {
if (this.log.isWarnEnabled()) {
+ // BEGIN android-changed
this.log.warn("Cookie rejected: \""
- + cookie + "\". " + ex.getMessage());
+ + cookieToString(cookie) + "\". " + ex.getMessage());
+ // END android-changed
}
}
}
@@ -142,5 +146,19 @@ public class ResponseProcessCookies implements HttpResponseInterceptor {
}
}
}
-
+
+ // BEGIN android-added
+ /**
+ * Don't log the cookie's value; that's potentially sensitive information.
+ */
+ private String cookieToString(Cookie cookie) {
+ return cookie.getClass().getSimpleName()
+ + "[version=" + cookie.getVersion()
+ + ",name=" + cookie.getName()
+ + ",domain=" + cookie.getDomain()
+ + ",path=" + cookie.getPath()
+ + ",expiry=" + cookie.getExpiryDate()
+ + "]";
+ }
+ // END android-added
}