Files
spring-boot-demo/secrets/output/08-leaks.txt
T

12 lines
844 B
Plaintext

1. a record's generated toString:
NaiveDb[url=jdbc:postgresql://db/app, password=hunter2]
DbProperties overrides toString: DbProperties[url=jdbc:postgresql://db/app, username=app, password=<redacted:7 chars>]
2. /actuator/env and /actuator/configprops, Boot 4.1.2 defaults:
GET /actuator/env/db.password value shown: ******
GET /actuator/env/internal.signing.material value shown: ******
GET /actuator/configprops body contains the password: false
3. same, management.endpoint.env.show-values=ALWAYS and configprops.show-values=ALWAYS:
GET /actuator/env/db.password value shown: hunter2
GET /actuator/env/internal.signing.material value shown: also-secret-but-not-named-like-one
GET /actuator/configprops body contains the password: true