You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
WildFly includes a common configuration framework that can be used to configure multiple clients, rather than relying on each client having their own configuration file. The configuration can be defined using a wildfly-config.xml file, where there are multiple configuration sections containing elements whose values determine the configuration of the WildFly clients.
Attribute values for client configuration can include sensitive information. And while credential references can be used for some of them, others still need to be defined using plaintext. As a result, those elements are still exposed and make the application vulnerable. Additionally, the password for the credential store needs to be defined as clear-text, which is not ideal.
This feature adds support for encrypted expressions for elements in the wildfly-config.xml file, which allows users to avoid specifying sensitive information using plaintext.
Issue Contact
fjuma
The text was updated successfully, but these errors were encountered:
Description
WildFly includes a common configuration framework that can be used to configure multiple clients, rather than relying on each client having their own configuration file. The configuration can be defined using a
wildfly-config.xml
file, where there are multiple configuration sections containing elements whose values determine the configuration of the WildFly clients.Attribute values for client configuration can include sensitive information. And while credential references can be used for some of them, others still need to be defined using plaintext. As a result, those elements are still exposed and make the application vulnerable. Additionally, the password for the credential store needs to be defined as clear-text, which is not ideal.
This feature adds support for encrypted expressions for elements in the
wildfly-config.xml
file, which allows users to avoid specifying sensitive information using plaintext.Issue Contact
fjuma
The text was updated successfully, but these errors were encountered: