From 4be02450dd5c132670e2c0d1f4dd180b4d49f5ca Mon Sep 17 00:00:00 2001 From: Adar Dembo Date: Wed, 22 Jun 2011 17:17:57 -0700 Subject: [PATCH] Don't leak PrivateKeyStringResource private keys via toString() --- .../sshj/userauth/password/PrivateKeyStringResource.java | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/src/main/java/net/schmizz/sshj/userauth/password/PrivateKeyStringResource.java b/src/main/java/net/schmizz/sshj/userauth/password/PrivateKeyStringResource.java index 6555bec8..a727aebb 100644 --- a/src/main/java/net/schmizz/sshj/userauth/password/PrivateKeyStringResource.java +++ b/src/main/java/net/schmizz/sshj/userauth/password/PrivateKeyStringResource.java @@ -29,4 +29,11 @@ public class PrivateKeyStringResource extends Resource { public Reader getReader() throws IOException { return new StringReader(getDetail()); } + + @Override + public String toString() { + // If not overridden, the superclass's will return the private key as + // part of the string. + return "[" + getClass().getSimpleName() + "]"; + } }