JavaExceptionThrow configurable message exclusion
Carter Kozak
ckozak at ckozak.net
Tue Dec 22 20:48:37 UTC 2020
Hello,
I would like to record jdk.JavaExceptionThrow and jdk.JavaErrorThrow events without
capturing Throwable message field, just retaining the event stack trace (when enabled)
and thrownClass. Based on a search through the code and documentation, this doesn't
appear to be something that's currently configurable, though I could be wrong.
Exception messages can contain dangerous information that shouldn't be logged
or collected depending on the environment. Consider a http basic auth parser which
attempts to base64 decode an Authorization header. On failure, we don't want to record
the input to a JFR log because it may contain valid credentials that have been formatted
incorrectly for this protocol.
Throwable messages may be very large and significantly increase the cost of storing a
flight recording in some cases. The memory footprint of an event should be more
consistent with messages disabled.
Is this an enhancement you would consider? Ideas and feedback are always appreciated.
Thanks,
Carter Kozak
More information about the hotspot-jfr-dev
mailing list