From e4a51731990c7599f92e00cd286d6ae760a98ed4 Mon Sep 17 00:00:00 2001 From: Chip Childers Date: Thu, 29 Nov 2012 12:24:42 -0500 Subject: [PATCH] CLOUDSTACK-505: Do not log the command response object for the createSSHKeyPair command. Signed-off-by: Chip Childers --- server/src/com/cloud/api/ApiServer.java | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/server/src/com/cloud/api/ApiServer.java b/server/src/com/cloud/api/ApiServer.java index a5c9ea5b1ee..7365b36622f 100755 --- a/server/src/com/cloud/api/ApiServer.java +++ b/server/src/com/cloud/api/ApiServer.java @@ -586,7 +586,11 @@ public class ApiServer implements HttpRequestHandler { return; } auditTrailSb.append(" " + HttpServletResponse.SC_OK + " "); - auditTrailSb.append(result); + if (command.equals("createSSHKeyPair")){ + auditTrailSb.append("This result was not logged because it contains sensitive data."); + } else { + auditTrailSb.append(result); + } /* * if (command.equals("queryAsyncJobResult")){ //For this command we need to also log job status and job * resultcode for