Add redaction module: JFR in-process data redaction (JEP 536) on JDK 27

Co-Authored-By: Claude Sonnet 5.5 <[email protected]> Claude-Session: https://claude.ai/code/session_01CifR2BE7PBvRy5hT8TS9oz
2026-10-26 01:43:28 +00:00
parent c7eccd1db5
commit e84684e2c7
17 changed files with 682 additions and 0 deletions
@@ -0,0 +1,163 @@
+### JDK 27 with NO redaction flags at all
+openjdk version "27.0.1.0.2" 2026-10-21
+OpenJDK Runtime Environment Temurin-27.0.1.0.2+1 (build 27.0.1.0.2+1)
+OpenJDK 64-Bit Server VM Temurin-27.0.1.0.2+1 (build 27.0.1.0.2+1, mixed mode, sharing)
+LEAK-ENV-TOKEN-1           RAW=clean EVENTS=0
+LEAK-PROP-PASSWORD-2       RAW=clean EVENTS=0
+LEAK-ARG-DBPASSWORD-3      RAW=clean EVENTS=0
+LEAK-URL-PW-4              RAW=LEAK  EVENTS=2
+LEAK-ENV-CONN-5            RAW=LEAK  EVENTS=1
+LEAK-PROP-DBPASS-6         RAW=LEAK  EVENTS=2
+LEAK-ARG-DBPASS-7          RAW=LEAK  EVENTS=2
+exit=2
+
+### jfr print
+jdk.JVMInformation {
+  startTime = 01:42:38.133 (2026-10-26)
+  jvmName = "OpenJDK 64-Bit Server VM"
+  jvmVersion = "OpenJDK 64-Bit Server VM (27.0.1.0.2+1) for linux-amd64 JRE (27.0.1.0.2+1), built on 2026-10-21T00:00:00Z with gcc 14.2.0"
+  jvmArguments = "-XX:StartFlightRecording:filename=/tmp/jfr-redaction/default.jfr -Xmx256m [REDACTED] -Ddb-pass=LEAK-PROP-DBPASS-6 -Dapp.region=mumbai"
+  jvmFlags = N/A
+  javaArguments = "Workload [REDACTED] [REDACTED] --db-pass LEAK-ARG-DBPASS-7 https://john:[email protected]/login --verbose"
+  jvmStartTime = 01:42:37.505 (2026-10-26)
+  pid = 6463
+}
+
+jdk.InitialSystemProperty {
+  startTime = 01:42:38.133 (2026-10-26)
+  key = "java.vm.specification.name"
+  value = "Java Virtual Machine Specification"
+}
+
+jdk.InitialSystemProperty {
+  startTime = 01:42:38.133 (2026-10-26)
+  key = "java.vm.name"
+  value = "OpenJDK 64-Bit Server VM"
+}
+
+jdk.InitialSystemProperty {
+  startTime = 01:42:38.133 (2026-10-26)
+  key = "java.home"
+  value = "/tmp/claude-0/post2/jdk-27.0.1.0.2+1"
+}
+
+jdk.InitialSystemProperty {
+  startTime = 01:42:38.133 (2026-10-26)
+  key = "app.region"
+  value = "mumbai"
+}
+
+jdk.InitialSystemProperty {
+  startTime = 01:42:38.133 (2026-10-26)
+  key = "sun.java.command"
+  value = "Workload [REDACTED] [REDACTED] --db-pass LEAK-ARG-DBPASS-7 https://john:[email protected]/login --verbose"
+}
+
+jdk.InitialSystemProperty {
+  startTime = 01:42:38.133 (2026-10-26)
+  key = "java.class.path"
+  value = "/tmp/claude-0/post2/repo/redaction/build"
+}
+
+jdk.InitialSystemProperty {
+  startTime = 01:42:38.133 (2026-10-26)
+  key = "sun.java.launcher"
+  value = "SUN_STANDARD"
+}
+
+jdk.InitialSystemProperty {
+  startTime = 01:42:38.133 (2026-10-26)
+  key = "java.vm.compressedOopsMode"
+  value = "32-bit"
+}
+
+jdk.InitialSystemProperty {
+  startTime = 01:42:38.133 (2026-10-26)
+  key = "jdk.debug"
+  value = "release"
+}
+
+jdk.InitialSystemProperty {
+  startTime = 01:42:38.133 (2026-10-26)
+  key = "db-pass"
+  value = "LEAK-PROP-DBPASS-6"
+}
+
+jdk.InitialSystemProperty {
+  startTime = 01:42:38.133 (2026-10-26)
+  key = "javax.net.ssl.keyStorePassword"
+  value = "[REDACTED]"
+}
+
+jdk.InitialSystemProperty {
+  startTime = 01:42:38.133 (2026-10-26)
+  key = "java.vm.vendor"
+  value = "Eclipse Adoptium"
+}
+
+jdk.InitialSystemProperty {
+  startTime = 01:42:38.133 (2026-10-26)
+  key = "java.vm.specification.version"
+  value = "27"
+}
+
+jdk.InitialSystemProperty {
+  startTime = 01:42:38.133 (2026-10-26)
+  key = "java.vm.info"
+  value = "mixed mode, sharing"
+}
+
+jdk.InitialSystemProperty {
+  startTime = 01:42:38.133 (2026-10-26)
+  key = "java.vm.specification.vendor"
+  value = "Oracle Corporation"
+}
+
+jdk.InitialSystemProperty {
+  startTime = 01:42:38.133 (2026-10-26)
+  key = "java.vm.version"
+  value = "27.0.1.0.2+1"
+}
+
+jdk.InitialSystemProperty {
+  startTime = 01:42:38.133 (2026-10-26)
+  key = "sun.boot.library.path"
+  value = "/tmp/claude-0/post2/jdk-27.0.1.0.2+1/lib"
+}
+
+jdk.InitialSystemProperty {
+  startTime = 01:42:38.133 (2026-10-26)
+  key = "java.library.path"
+  value = "/usr/java/packages/lib:/usr/lib64:/lib64:/lib:/usr/lib"
+}
+
+jdk.InitialEnvironmentVariable {
+  startTime = 01:42:38.133 (2026-10-26)
+  key = "PATH"
+  value = "/usr/bin:/bin"
+}
+
+jdk.InitialEnvironmentVariable {
+  startTime = 01:42:38.133 (2026-10-26)
+  key = "DEPLOY_REGION"
+  value = "eu-west-1"
+}
+
+jdk.InitialEnvironmentVariable {
+  startTime = 01:42:38.133 (2026-10-26)
+  key = "HOME"
+  value = "/nonexistent"
+}
+
+jdk.InitialEnvironmentVariable {
+  startTime = 01:42:38.133 (2026-10-26)
+  key = "ACCESS_TOKEN"
+  value = "[REDACTED]"
+}
+
+jdk.InitialEnvironmentVariable {
+  startTime = 01:42:38.133 (2026-10-26)
+  key = "DB_CONN"
+  value = "LEAK-ENV-CONN-5"
+}
+