andreacavalli/netty5
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity
e146873740
netty5/codec-socks/src/main/java/io/netty/handler/codec/socks
History
Trustin Lee 9091e66e15 Hide password in exception messages of SocksAuthRequest 
Related: #3504

Motivation:

There are two places in the SocksAuthRequest constructor where an
IllegalArgumentException is thrown with a password as part of the
exception message.

This constitutes mishandling of confidential information, which can
compromise user privacy and is flagged as critical by security scanners.

Modifications:

Mask the password in the exception messages

Result:

No unexpected password leak
2015-03-17 17:23:30 +09:00
..
package-info.java Remove apiviz tags - we are focusing on user guide instead and putting diagrams there 2013-02-14 12:09:16 -08:00
SocksAddressType.java Rename fromByte() to valueOf() 2014-06-24 16:36:10 +09:00
SocksAuthRequest.java Hide password in exception messages of SocksAuthRequest 2015-03-17 17:23:30 +09:00
SocksAuthRequestDecoder.java Fix most inspector warnings 2014-07-02 20:21:30 +09:00
SocksAuthResponse.java Prettify APIviz / Tighten visibility / Move subclasses to top level / Remove unused UnknownSocksMessage 2013-02-11 19:42:23 +09:00
SocksAuthResponseDecoder.java Fix most inspector warnings 2014-07-02 20:21:30 +09:00
SocksAuthScheme.java Rename fromByte() to valueOf() 2014-06-24 16:36:10 +09:00
SocksAuthStatus.java Rename fromByte() to valueOf() 2014-06-24 16:36:10 +09:00
SocksCmdRequest.java [#2428] Proper fix of incorrect port range check 2014-04-30 08:16:43 +02:00
SocksCmdRequestDecoder.java Fix most inspector warnings 2014-07-02 20:21:30 +09:00
SocksCmdResponse.java Correctly handle SocksCmdResponse. Related to #2428 2014-04-30 10:42:46 +02:00
SocksCmdResponseDecoder.java Fix most inspector warnings 2014-07-02 20:21:30 +09:00
SocksCmdStatus.java Rename fromByte() to valueOf() 2014-06-24 16:36:10 +09:00
SocksCmdType.java Rename fromByte() to valueOf() 2014-06-24 16:36:10 +09:00
SocksCommonUtils.java Fix the potential copyright issue in SocksCommonUtils 2014-02-06 15:00:06 -08:00
SocksInitRequest.java Prettify APIviz / Tighten visibility / Move subclasses to top level / Remove unused UnknownSocksMessage 2013-02-11 19:42:23 +09:00
SocksInitRequestDecoder.java Fix most inspector warnings 2014-07-02 20:21:30 +09:00
SocksInitResponse.java Prettify APIviz / Tighten visibility / Move subclasses to top level / Remove unused UnknownSocksMessage 2013-02-11 19:42:23 +09:00
SocksInitResponseDecoder.java Fix most inspector warnings 2014-07-02 20:21:30 +09:00
SocksMessage.java Deprecate SocksMessage.encodeAsByteBuf() 2014-06-24 16:41:47 +09:00
SocksMessageEncoder.java Deprecate SocksMessage.encodeAsByteBuf() 2014-06-24 16:41:47 +09:00
SocksMessageType.java Prettify APIviz / Tighten visibility / Move subclasses to top level / Remove unused UnknownSocksMessage 2013-02-11 19:42:23 +09:00
SocksProtocolVersion.java Rename fromByte() to valueOf() 2014-06-24 16:36:10 +09:00
SocksRequest.java Prettify APIviz / Tighten visibility / Move subclasses to top level / Remove unused UnknownSocksMessage 2013-02-11 19:42:23 +09:00
SocksRequestType.java Prettify APIviz / Tighten visibility / Move subclasses to top level / Remove unused UnknownSocksMessage 2013-02-11 19:42:23 +09:00
SocksResponse.java Prettify APIviz / Tighten visibility / Move subclasses to top level / Remove unused UnknownSocksMessage 2013-02-11 19:42:23 +09:00
SocksResponseType.java Prettify APIviz / Tighten visibility / Move subclasses to top level / Remove unused UnknownSocksMessage 2013-02-11 19:42:23 +09:00
SocksSubnegotiationVersion.java Rename fromByte() to valueOf() 2014-06-24 16:36:10 +09:00
UnknownSocksRequest.java [#787] Move the socks package to the right place 2012-12-04 09:14:05 +01:00
UnknownSocksResponse.java [#787] Move the socks package to the right place 2012-12-04 09:14:05 +01:00