[Security fix] Avoid print access token to log

This commit is contained in:
khanhduytran0
2020-11-18 20:18:09 +07:00
parent b18dc9b6da
commit 4a853ec08f

View File

@@ -116,8 +116,8 @@ public class JREUtils
// Avoid leaking access token to log by replace it.
// Also, Minecraft will just print it once.
if (checkAccessTokenLeak) {
checkAccessTokenLeak = false;
if (accessToken != null && accessToken.length() > 5 && currStr.contains(accessToken)) {
checkAccessTokenLeak = false;
currStr = currStr.replace(accessToken, "ACCESS_TOKEN_HIDDEN");
}
}