Skip to content

Commit a70fa80

Browse files
committed
Rectify incorrect sanitizing regex example provided in how-to docs
Closes gh-29951
1 parent 1e8d29f commit a70fa80

File tree

1 file changed

+1
-1
lines changed
  • spring-boot-project/spring-boot-docs/src/docs/asciidoc/howto

1 file changed

+1
-1
lines changed

spring-boot-project/spring-boot-docs/src/docs/asciidoc/howto/actuator.adoc

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,7 @@ See also the section on "`<<features#features.developing-web-applications.spring
3737
[[howto.actuator.sanitize-sensitive-values]]
3838
=== Sanitize Sensitive Values
3939
Information returned by the `env` and `configprops` endpoints can be somewhat sensitive so keys matching certain patterns are sanitized by default (i.e. their values are replaced by `+******+`). Spring Boot uses sensible defaults for such keys: any key ending with the word "password", "secret", "key", "token", "vcap_services", "sun.java.command" is entirely sanitized.
40-
Additionally, any key that holds the word `credentials` (configured as a regular expression, i.e. `+*credentials.*+`) as part of the key is also entirely sanitized.
40+
Additionally, any key that holds the word `credentials` (configured as a regular expression, i.e. `+.*credentials.*+`) as part of the key is also entirely sanitized.
4141

4242
Furthermore, Spring Boot sanitizes the sensitive portion of URI-like values for keys with one of the following endings:
4343

0 commit comments

Comments
 (0)