i2b2 Sponsored Project/s:
Testing Notes:
Hide
Tested with Mike Mendis and the password no longer displays. The tags for the password are sent in the xml but the actually password is replaced with asterisks.
This issue is now working correctly and can be included in the 1.7.05 release.
Show
Tested with Mike Mendis and the password no longer displays. The tags for the password are sent in the xml but the actually password is replaced with asterisks.
This issue is now working correctly and can be included in the 1.7.05 release.
In the JBoss server log for the edu.harvard.i2b2.pm.ws.PMService::Received Request PDO Element, the user password is displaying in the <security> section.
Although this information is only displayed when the DEBUG level is turned on it can be problematic for those sites that do not have their passwords encrypted. Encrypted passwords will display an encrypted Session Key instead of the password. This session key does time out and can not be used when logging into either the i2b2 Web Client or the Workbench. It can however be used to access the server if the user viewing the logs has a method of querying the server directly.
Bottom line is user passwords should not display in the JBoss logs regardless of whether or not DEBUG is turned on.
{"report":{"fcp":1817.1999998092651,"ttfb":1126.1999998092651,"pageVisibility":"visible","entityId":10374,"key":"jira.project.issue.view-issue","isInitial":true,"threshold":1000,"elementTimings":{},"userDeviceMemory":8,"userDeviceProcessors":64,"apdex":0.5,"journeyId":"1c52d21c-6ec3-4568-8508-2ac64521201d","navigationType":0,"readyForUser":1869.4000005722046,"redirectCount":0,"resourceLoadedEnd":1938.9000005722046,"resourceLoadedStart":1135.3000001907349,"resourceTiming":[{"duration":141.89999961853027,"initiatorType":"link","name":"https://community.i2b2.org/jira/s/7fd763ecdf5ed1f47fc4d22fa8382e97-CDN/4x9nqn/820011/16zrvj4/49fa3aa3d35a2cc689cbf274e66cc41a/_/download/contextbatch/css/_super/batch.css","startTime":1135.3000001907349,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":1135.3000001907349,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":1277.1999998092651,"responseStart":0,"secureConnectionStart":0},{"duration":142.39999961853027,"initiatorType":"link","name":"https://community.i2b2.org/jira/s/898b8076c5e82f53cd816ca393e45a56-CDN/4x9nqn/820011/16zrvj4/41b71ca9fb0eed92dc73e9510f2744ee/_/download/contextbatch/css/project.issue.navigator,jira.view.issue,jira.global,atl.general,-_super/batch.css?jira.create.linked.issue=true&richediton=true&whisper-enabled=true","startTime":1135.6000003814697,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":1135.6000003814697,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":1278,"responseStart":0,"secureConnectionStart":0},{"duration":359.30000019073486,"initiatorType":"script","name":"https://community.i2b2.org/jira/s/4c9c503fe98f210445831b0d7b0cdc33-CDN/4x9nqn/820011/16zrvj4/49fa3aa3d35a2cc689cbf274e66cc41a/_/download/contextbatch/js/_super/batch.js?locale=en-US","startTime":1135.8000001907349,"connectEnd":1374.1999998092651,"connectStart":1354.6000003814697,"domainLookupEnd":1354.6000003814697,"domainLookupStart":1354.6000003814697,"fetchStart":1135.8000001907349,"redirectEnd":0,"redirectStart":0,"requestStart":1374.3000001907349,"responseEnd":1495.1000003814697,"responseStart":1390.1999998092651,"secureConnectionStart":1364.1999998092651},{"duration":412.1000003814697,"initiatorType":"script","name":"https://community.i2b2.org/jira/s/694e598c1ae48b0f96655173631cd247-CDN/4x9nqn/820011/16zrvj4/41b71ca9fb0eed92dc73e9510f2744ee/_/download/contextbatch/js/project.issue.navigator,jira.view.issue,jira.global,atl.general,-_super/batch.js?jira.create.linked.issue=true&locale=en-US&richediton=true&whisper-enabled=true","startTime":1136.3000001907349,"connectEnd":1446.6999998092651,"connectStart":1422.1999998092651,"domainLookupEnd":1422.1999998092651,"domainLookupStart":1422.1999998092651,"fetchStart":1136.3000001907349,"redirectEnd":0,"redirectStart":0,"requestStart":1447,"responseEnd":1548.4000005722046,"responseStart":1468.5,"secureConnectionStart":1433.6000003814697},{"duration":350.29999923706055,"initiatorType":"script","name":"https://community.i2b2.org/jira/s/53f54e0ac3f00bb56b136b4d2fff2853-CDN/4x9nqn/820011/16zrvj4/aae1242f5fc81cc6a5bb8bc963ccda29/_/download/contextbatch/js/atl.global,-_super/batch.js?locale=en-US","startTime":1136.4000005722046,"connectEnd":1470.8000001907349,"connectStart":1446,"domainLookupEnd":1446,"domainLookupStart":1446,"fetchStart":1136.4000005722046,"redirectEnd":0,"redirectStart":0,"requestStart":1471.6000003814697,"responseEnd":1486.6999998092651,"responseStart":1484.9000005722046,"secureConnectionStart":1457.8000001907349},{"duration":356.6000003814697,"initiatorType":"script","name":"https://community.i2b2.org/jira/s/d41d8cd98f00b204e9800998ecf8427e-CDN/4x9nqn/820011/16zrvj4/1.0/_/download/batch/jira.webresources:calendar-en/jira.webresources:calendar-en.js","startTime":1136.6999998092651,"connectEnd":1480.6999998092651,"connectStart":1459.5,"domainLookupEnd":1459.5,"domainLookupStart":1459.5,"fetchStart":1136.6999998092651,"redirectEnd":0,"redirectStart":0,"requestStart":1480.9000005722046,"responseEnd":1493.3000001907349,"responseStart":1492,"secureConnectionStart":1470.4000005722046},{"duration":369.0999994277954,"initiatorType":"script","name":"https://community.i2b2.org/jira/s/d41d8cd98f00b204e9800998ecf8427e-CDN/4x9nqn/820011/16zrvj4/1.0/_/download/batch/jira.webresources:calendar-localisation-moment/jira.webresources:calendar-localisation-moment.js","startTime":1136.9000005722046,"connectEnd":1494,"connectStart":1473.4000005722046,"domainLookupEnd":1473.4000005722046,"domainLookupStart":1473.4000005722046,"fetchStart":1136.9000005722046,"redirectEnd":0,"redirectStart":0,"requestStart":1494,"responseEnd":1506,"responseStart":1504.6999998092651,"secureConnectionStart":1483.6999998092651},{"duration":158.9000005722046,"initiatorType":"link","name":"https://community.i2b2.org/jira/s/30748292e4ca68be6947d7969829384b-CDN/4x9nqn/820011/16zrvj4/4f66da484ef7d95a2a604d3ab014374c/_/download/contextbatch/css/jira.global.look-and-feel,-_super/batch.css","startTime":1137,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":1137,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":1295.9000005722046,"responseStart":0,"secureConnectionStart":0},{"duration":382.5,"initiatorType":"script","name":"https://community.i2b2.org/jira/rest/api/1.0/shortcuts/820011/a9e270f026ecabffc9a59343e5439391/shortcuts.js?context=issuenavigation&context=issueaction","startTime":1137.1999998092651,"connectEnd":1506.4000005722046,"connectStart":1486.5,"domainLookupEnd":1486.5,"domainLookupStart":1486.5,"fetchStart":1137.1999998092651,"redirectEnd":0,"redirectStart":0,"requestStart":1506.5,"responseEnd":1519.6999998092651,"responseStart":1518,"secureConnectionStart":1496.1999998092651},{"duration":476,"initiatorType":"link","name":"https://community.i2b2.org/jira/s/3ac36323ba5e4eb0af2aa7ac7211b4bb-CDN/4x9nqn/820011/16zrvj4/efa42a25652b26dfd802540c024826b3/_/download/contextbatch/css/com.atlassian.jira.projects.sidebar.init,-_super,-jira.view.issue,-project.issue.navigator/batch.css?jira.create.linked.issue=true&richediton=true","startTime":1230.4000005722046,"connectEnd":0,"connectStart":0,"domainLookupEnd":0,"domainLookupStart":0,"fetchStart":1230.4000005722046,"redirectEnd":0,"redirectStart":0,"requestStart":0,"responseEnd":1706.4000005722046,"responseStart":0,"secureConnectionStart":0},{"duration":541.5,"initiatorType":"script","name":"https://community.i2b2.org/jira/s/8087506fefd02b4096991c90836b49f6-CDN/4x9nqn/820011/16zrvj4/efa42a25652b26dfd802540c024826b3/_/download/contextbatch/js/com.atlassian.jira.projects.sidebar.init,-_super,-jira.view.issue,-project.issue.navigator/batch.js?jira.create.linked.issue=true&locale=en-US&richediton=true","startTime":1230.5,"connectEnd":1753.6000003814697,"connectStart":1733.8000001907349,"domainLookupEnd":1733.8000001907349,"domainLookupStart":1733.8000001907349,"fetchStart":1230.5,"redirectEnd":0,"redirectStart":0,"requestStart":1753.6000003814697,"responseEnd":1772,"responseStart":1766.3000001907349,"secureConnectionStart":1743.5},{"duration":600.3000001907349,"initiatorType":"script","name":"https://community.i2b2.org/jira/s/d41d8cd98f00b204e9800998ecf8427e-CDN/4x9nqn/820011/16zrvj4/1.0/_/download/batch/jira.webresources:bigpipe-js/jira.webresources:bigpipe-js.js","startTime":1263.1000003814697,"connectEnd":1846.3000001907349,"connectStart":1818.4000005722046,"domainLookupEnd":1818.4000005722046,"domainLookupStart":1818.4000005722046,"fetchStart":1263.1000003814697,"redirectEnd":0,"redirectStart":0,"requestStart":1846.4000005722046,"responseEnd":1863.4000005722046,"responseStart":1861.6000003814697,"secureConnectionStart":1832.5},{"duration":662.8000001907349,"initiatorType":"script","name":"https://community.i2b2.org/jira/s/d41d8cd98f00b204e9800998ecf8427e-CDN/4x9nqn/820011/16zrvj4/1.0/_/download/batch/jira.webresources:bigpipe-init/jira.webresources:bigpipe-init.js","startTime":1276.1000003814697,"connectEnd":1918,"connectStart":1897.6000003814697,"domainLookupEnd":1897.6000003814697,"domainLookupStart":1897.6000003814697,"fetchStart":1276.1000003814697,"redirectEnd":0,"redirectStart":0,"requestStart":1918.6999998092651,"responseEnd":1938.9000005722046,"responseStart":1936.5,"secureConnectionStart":1907.3000001907349},{"duration":143.19999980926514,"initiatorType":"xmlhttprequest","name":"https://community.i2b2.org/jira/rest/webResources/1.0/resources","startTime":1676.8000001907349,"connectEnd":1804.5,"connectStart":1785.1000003814697,"domainLookupEnd":1785.1000003814697,"domainLookupStart":1785.1000003814697,"fetchStart":1676.8000001907349,"redirectEnd":0,"redirectStart":0,"requestStart":1804.6999998092651,"responseEnd":1820,"responseStart":1818.5,"secureConnectionStart":1794.6000003814697}],"fetchStart":926,"domainLookupStart":930,"domainLookupEnd":1018,"connectStart":1018,"connectEnd":1064,"secureConnectionStart":1030,"requestStart":1064,"responseStart":1127,"responseEnd":1276,"domLoading":1131,"domInteractive":1960,"domContentLoadedEventStart":1960,"domContentLoadedEventEnd":1998,"domComplete":2196,"loadEventStart":2196,"loadEventEnd":2197,"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","marks":[{"name":"bigPipe.sidebar-id.start","time":1946.6000003814697},{"name":"bigPipe.sidebar-id.end","time":1947.6000003814697},{"name":"bigPipe.activity-panel-pipe-id.start","time":1947.8000001907349},{"name":"bigPipe.activity-panel-pipe-id.end","time":1948.9000005722046},{"name":"activityTabFullyLoaded","time":2015.5}],"measures":[],"correlationId":"3e2a5f0aee06c3","effectiveType":"4g","downlink":10,"rtt":0,"serverDuration":200,"dbReadsTimeInMs":42,"dbConnsTimeInMs":52,"applicationHash":"0629dd8d260e3954ece49053e565d01dabe11609","experiments":[]}}