Update the URL pattern regex to correctly mask the SMB2 passwords

arunans23 · Sep 25, 2023 · 663e5f2 · 663e5f2
1 parent 96e7ce2
commit 663e5f2
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/modules/commons/src/main/java/org/apache/synapse/commons/vfs/VFSUtils.java b/modules/commons/src/main/java/org/apache/synapse/commons/vfs/VFSUtils.java
@@ -67,7 +67,7 @@ public class VFSUtils {
     /**
      * URL pattern
      */
-    private static final Pattern URL_PATTERN = Pattern.compile("[a-z]+://.*");
+    private static final Pattern URL_PATTERN = Pattern.compile("[a-zA-Z0-9]+://.*");
 
     /**
      * Password pattern
@@ -350,7 +350,7 @@ public static String maskURLPassword(String url) {
         String maskUrl;
         if (urlMatcher.find()) {
             final Matcher pwdMatcher = PASSWORD_PATTERN.matcher(url);
-            maskUrl = pwdMatcher.replaceFirst("\":***@\"");
+            maskUrl = pwdMatcher.replaceFirst(":***@");
             return maskUrl;
         }
         return url;