Support for security logging annotations and aspects about owasp-security-logging HOT 4 OPEN

all configuration for the securrity logging library now is done now with xml, but it can also be done with annotations. Here is an example of what i mean : https://projectlombok.org/features/log. If you can annotate a property with say @Masked it would only show up in logs as masked value (f.i. last 4 numbers of a credit card). Those are the features i am thinking of.

from owasp-security-logging.

Hi @javabeanz. Please provide a little more detail for the benefits of logging annotations and aspects so we understand what you propose. So for example, what annotations do you suggest and what do they do? Also for AOP, what aspects should we create and where should they be bound? Thanks. --Milton

from owasp-security-logging.

I like this idea. Developers could annotate properties of their classes and prevent them from being logged incidentally (e.g. if MyBean.toString() is called).

from owasp-security-logging.

from owasp-security-logging.