Merge pull request #2103 from arunans23/master

Update the URL pattern regex to correctly mask the SMB2 passwords
wso2 · Sep 26, 2023 · f63772c · f63772c
2 parents 0695326 + 663e5f2
commit f63772c
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/modules/commons/src/main/java/org/apache/synapse/commons/vfs/VFSUtils.java b/modules/commons/src/main/java/org/apache/synapse/commons/vfs/VFSUtils.java
@@ -67,7 +67,7 @@ public class VFSUtils {
     /**
      * URL pattern
      */
-    private static final Pattern URL_PATTERN = Pattern.compile("[a-z]+://.*");
+    private static final Pattern URL_PATTERN = Pattern.compile("[a-zA-Z0-9]+://.*");
 
     /**
      * Password pattern
@@ -350,7 +350,7 @@ public static String maskURLPassword(String url) {
         String maskUrl;
         if (urlMatcher.find()) {
             final Matcher pwdMatcher = PASSWORD_PATTERN.matcher(url);
-            maskUrl = pwdMatcher.replaceFirst("\":***@\"");
+            maskUrl = pwdMatcher.replaceFirst(":***@");
             return maskUrl;
         }
         return url;