[jira] [Created] (VFS-423) FileSystemException for invalid URI path doesn't hide the password

classic Classic list List threaded Threaded
4 messages Options
Reply | Threaded
Open this post in threaded view
|

[jira] [Created] (VFS-423) FileSystemException for invalid URI path doesn't hide the password

David Mollitor (Jira)
Jason created VFS-423:
-------------------------

             Summary: FileSystemException for invalid URI path doesn't hide the password
                 Key: VFS-423
                 URL: https://issues.apache.org/jira/browse/VFS-423
             Project: Commons VFS
          Issue Type: Bug
    Affects Versions: 2.0
            Reporter: Jason
            Priority: Critical


While trying to access a remote server through FTP Connection, with an invalid password, it will throw a FileSystemException for invalid URI path and show the complete URI path without the password being encrypted.

Code:
  FileSystemManager fsManager = VFS.getManager();
  rfConfig.setPassword( "ABCDEFG/ABCDEFG" );
  FileSystemOptions opts = factory.getFileSystemOptions( rfConfig.getUrl(),   rfConfig.getUserName(), rfConfig.getPassword() );                                            
  FileObject sourceDir = fsManager.resolveFile( completeUrl( rfConfig ), opts );


Exception shown in Console:
org.apache.commons.vfs2.FileSystemException: Invalid absolute URI "ftp://root:ABCDEFG/ABCDEFG@10.20.25.11/Vol1/a.txt".
        at org.apache.commons.vfs2.provider.AbstractOriginatingFileProvider.findFile(AbstractOriginatingFileProvider.java:61)
        at org.apache.commons.vfs2.impl.DefaultFileSystemManager.resolveFile(DefaultFileSystemManager.java:693)
        at org.apache.commons.vfs2.impl.DefaultFileSystemManager.resolveFile(DefaultFileSystemManager.java:621)

Let me know if more details is needed.


--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

       
Reply | Threaded
Open this post in threaded view
|

[jira] [Commented] (VFS-423) FileSystemException for invalid URI path doesn't hide the password

David Mollitor (Jira)

    [ https://issues.apache.org/jira/browse/VFS-423?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13399284#comment-13399284 ]

Gary D. Gregory commented on VFS-423:
-------------------------------------

Can you provide an example that compiles?


               

> FileSystemException for invalid URI path doesn't hide the password
> ------------------------------------------------------------------
>
>                 Key: VFS-423
>                 URL: https://issues.apache.org/jira/browse/VFS-423
>             Project: Commons VFS
>          Issue Type: Bug
>    Affects Versions: 2.0
>            Reporter: Jason
>            Priority: Critical
>
> While trying to access a remote server through FTP Connection, with an invalid password, it will throw a FileSystemException for invalid URI path and show the complete URI path without the password being encrypted.
> Code:
>   FileSystemManager fsManager = VFS.getManager();
>   rfConfig.setPassword( "ABCDEFG/ABCDEFG" );
>   FileSystemOptions opts = factory.getFileSystemOptions( rfConfig.getUrl(),   rfConfig.getUserName(), rfConfig.getPassword() );                                            
>   FileObject sourceDir = fsManager.resolveFile( completeUrl( rfConfig ), opts );
> Exception shown in Console:
> org.apache.commons.vfs2.FileSystemException: Invalid absolute URI "ftp://root:ABCDEFG/ABCDEFG@10.20.25.11/Vol1/a.txt".
> at org.apache.commons.vfs2.provider.AbstractOriginatingFileProvider.findFile(AbstractOriginatingFileProvider.java:61)
> at org.apache.commons.vfs2.impl.DefaultFileSystemManager.resolveFile(DefaultFileSystemManager.java:693)
> at org.apache.commons.vfs2.impl.DefaultFileSystemManager.resolveFile(DefaultFileSystemManager.java:621)
> Let me know if more details is needed.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

       
Reply | Threaded
Open this post in threaded view
|

[jira] [Resolved] (VFS-423) FileSystemException for invalid URI path doesn't hide the password

David Mollitor (Jira)
In reply to this post by David Mollitor (Jira)

     [ https://issues.apache.org/jira/browse/VFS-423?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jason resolved VFS-423.
-----------------------

    Resolution: Not A Problem

False alarm. Reconstructed url with user name and password whereas I should have  just used FileSystemOptions for it.
               

> FileSystemException for invalid URI path doesn't hide the password
> ------------------------------------------------------------------
>
>                 Key: VFS-423
>                 URL: https://issues.apache.org/jira/browse/VFS-423
>             Project: Commons VFS
>          Issue Type: Bug
>    Affects Versions: 2.0
>            Reporter: Jason
>            Priority: Critical
>
> While trying to access a remote server through FTP Connection, with an invalid password, it will throw a FileSystemException for invalid URI path and show the complete URI path without the password being encrypted.
> Code:
>   FileSystemManager fsManager = VFS.getManager();
>   rfConfig.setPassword( "ABCDEFG/ABCDEFG" );
>   FileSystemOptions opts = factory.getFileSystemOptions( rfConfig.getUrl(),   rfConfig.getUserName(), rfConfig.getPassword() );                                            
>   FileObject sourceDir = fsManager.resolveFile( completeUrl( rfConfig ), opts );
> Exception shown in Console:
> org.apache.commons.vfs2.FileSystemException: Invalid absolute URI "ftp://root:ABCDEFG/ABCDEFG@10.20.25.11/Vol1/a.txt".
> at org.apache.commons.vfs2.provider.AbstractOriginatingFileProvider.findFile(AbstractOriginatingFileProvider.java:61)
> at org.apache.commons.vfs2.impl.DefaultFileSystemManager.resolveFile(DefaultFileSystemManager.java:693)
> at org.apache.commons.vfs2.impl.DefaultFileSystemManager.resolveFile(DefaultFileSystemManager.java:621)
> Let me know if more details is needed.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

       
Reply | Threaded
Open this post in threaded view
|

[jira] [Closed] (VFS-423) FileSystemException for invalid URI path doesn't hide the password

David Mollitor (Jira)
In reply to this post by David Mollitor (Jira)

     [ https://issues.apache.org/jira/browse/VFS-423?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Gary D. Gregory closed VFS-423.
-------------------------------


Closing, reporter says "Not a problem."
               

> FileSystemException for invalid URI path doesn't hide the password
> ------------------------------------------------------------------
>
>                 Key: VFS-423
>                 URL: https://issues.apache.org/jira/browse/VFS-423
>             Project: Commons VFS
>          Issue Type: Bug
>    Affects Versions: 2.0
>            Reporter: Jason
>            Priority: Critical
>
> While trying to access a remote server through FTP Connection, with an invalid password, it will throw a FileSystemException for invalid URI path and show the complete URI path without the password being encrypted.
> Code:
>   FileSystemManager fsManager = VFS.getManager();
>   rfConfig.setPassword( "ABCDEFG/ABCDEFG" );
>   FileSystemOptions opts = factory.getFileSystemOptions( rfConfig.getUrl(),   rfConfig.getUserName(), rfConfig.getPassword() );                                            
>   FileObject sourceDir = fsManager.resolveFile( completeUrl( rfConfig ), opts );
> Exception shown in Console:
> org.apache.commons.vfs2.FileSystemException: Invalid absolute URI "ftp://root:ABCDEFG/ABCDEFG@10.20.25.11/Vol1/a.txt".
> at org.apache.commons.vfs2.provider.AbstractOriginatingFileProvider.findFile(AbstractOriginatingFileProvider.java:61)
> at org.apache.commons.vfs2.impl.DefaultFileSystemManager.resolveFile(DefaultFileSystemManager.java:693)
> at org.apache.commons.vfs2.impl.DefaultFileSystemManager.resolveFile(DefaultFileSystemManager.java:621)
> Let me know if more details is needed.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.apache.org/jira/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira