From 04a833f1698542fc855fa0f02c1e3f54ea7b6487 Mon Sep 17 00:00:00 2001
From: Michael Bayne <mdb@threerings.net>
Date: Mon, 6 Nov 2006 23:57:45 +0000
Subject: [PATCH] Obscure password information when we log URLs.

git-svn-id: svn+ssh://src.earth.threerings.net/nenya/trunk@70 ed5b42cb-e716-0410-a449-f6a68f950b19
---
 src/java/com/threerings/util/BrowserUtil.java | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/src/java/com/threerings/util/BrowserUtil.java b/src/java/com/threerings/util/BrowserUtil.java
index f7d76993..ee19e002 100644
--- a/src/java/com/threerings/util/BrowserUtil.java
+++ b/src/java/com/threerings/util/BrowserUtil.java
@@ -80,7 +80,11 @@ public class BrowserUtil
             cmd = new String[] { genagent, url.toString() };
         }
 
-        log.info("Browsing URL [cmd=" + StringUtil.join(cmd, " ") + "].");
+        // obscure any password information
+        String logcmd = StringUtil.join(cmd, " ");
+        logcmd = logcmd.replaceAll("password=[^&]*", "password=XXX");
+        log.info("Browsing URL [cmd=" + logcmd + "].");
+
         try {
             Process process = Runtime.getRuntime().exec(cmd);
             BrowserTracker tracker = new BrowserTracker(process, url, listener);