Author Topic: Composer 8.1.4 -backend Block and Sensitive Data  (Read 2517 times)

Offline ymattica

  • Newbie
  • *
  • Posts: 20
  • Karma: 0
Composer 8.1.4 -backend Block and Sensitive Data
« on: April 20, 2016, 04:31:21 PM »
Hi,
how can I pass sensitive data to a backend block?
'Security' property is not present in this block, and the sensitive data are shown in compose.log files through GVPHttpRequestProcessor.getAdditionalParams ()...
Regards



Offline cavagnaro

  • Administrator
  • Hero Member
  • *****
  • Posts: 7640
  • Karma: 56330
Re: Composer 8.1.4 -backend Block and Sensitive Data
« Reply #1 on: April 20, 2016, 05:20:42 PM »
The Backend is just an application you create, so no security build as it is up to you to do it.
About logs, descrease the Log level on the block.

Offline ymattica

  • Newbie
  • *
  • Posts: 20
  • Karma: 0
Re: Composer 8.1.4 -backend Block and Sensitive Data
« Reply #2 on: April 21, 2016, 08:10:25 AM »
Hi,
the problem is that when I pass a JSON as an additional parameter of a backend block, this value is proposed in composer.log files in the following format

21/04/2016 10: 02: 21.926 dbRequest [INFO] - GVPHttpRequestProcessor.getAdditionalParams () additionalParams:{interface_INFO={"connid":"abcdefgr","ani":"3358445656","tocall":"ricaricacorp","cli":"","taglio":"20","taglioTTS":"20Euro","carta":"4444444444444444","cartaTTS":"4,4,4,4,4,4,4,4,4,4,4,4,4,4,4,4,","mese":"4","anno":"2222","dataTTS":"4,2222","ccv2":"1111","ccv2TTS":"1,1,1,1,"}}

The log level I can set in the backend block concerns the MCP log (property 'Logging'  )  but it seems doesn't work  for the tomcat log
How can I not bring up the detail of the additional parameters passed to the backend block?
Regards