fix RocketMQ SecretKey leakage risk (#3092)

fix RocketMQ SecretKey leakage risk.
pull/3102/head
panzhi 2 years ago committed by GitHub
parent b68bf725f4
commit 5f923b41e9
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

@ -77,10 +77,10 @@ public final class RocketMQUtils {
if (null != rpcHook) {
SessionCredentials sessionCredentials = ((AclClientRPCHook) rpcHook)
.getSessionCredentials();
instanceName.append(sessionCredentials.getAccessKey()).append(separator)
.append(sessionCredentials.getSecretKey()).append(separator);
instanceName.append(sessionCredentials.getAccessKey()).append(separator);
}
instanceName.append(identify).append(separator).append(UtilAll.getPid());
instanceName.append(identify).append(separator).append(UtilAll.getPid())
.append(separator).append(Long.toString(System.nanoTime(), 36));
return instanceName.toString();
}

Loading…
Cancel
Save