如何在catalina.out中屏蔽System.out.println(CARD_NUMBER)值

Question

我想屏蔽catalina.out中的System.out.println(CARD_NUMBER)值

我已经完成了以下代码，并且它对于日志记录工作得很好，例如Log.info( CARD_NO )被屏蔽为XXXX，但是如果写成System.out.println(CARD_NUMBER)，相同的CARD_NO不会被屏蔽，相反，CARD_NO被打印在catalina.out中

在某些类测试中，例如

Log.info(CARD_NO) -> XXXX (屏蔽卡编号)

System.out.println( CARD_NO ) ->CARD_NO打印(无屏蔽卡编号)

在Log4j.xml中

 <log4j:configuration xmlns:log4j="http://jakarta.apache.org/log4j/">
        <appender name="console" class="org.apache.log4j.ConsoleAppender">
            <param name="Target" value="System.out" />
            <layout class="com.test.soap.common.CustomFilteringLayout">
                <param name="ConversionPattern" value="%d{ISO8601} %-5p %c{1}.%M() %m%n" />
            </layout>
        </appender>

        <appender name="logfile" class="org.apache.log4j.DailyRollingFileAppender">
            <param name="File" value="../logs/test.log" />    
            <layout class="com.test.soap.common.CustomFilteringLayout">
                <param name="ConversionPattern" value="%d{ISO8601}{CST} %p %t [%c] - %m%n" />
            </layout>
        </appender> 

       <root>
        <priority value="INFO" />
        <appender-ref ref="logfile" />    
        <appender-ref ref="console" />         
    </root>

</log4j:configuration>

CustomFilteringLayout类

public class CustomFilteringLayout extends EnhancedPatternLayout {
    /**
     * Any number that's of 10 digit would be masked (e.g: cardId). If number is > 11 digit then first 12 digit would masked.
     * This is so because of keeping it in mind that cardNumber's length is 16 digit so first 12 digit would be masked.
     * 
     * @param LoggingEvent event
     * @return String formated String
     */

    @Override
    public String format(LoggingEvent event) {

        if (event.getMessage() instanceof String) {
            String message = event.getRenderedMessage();

            Matcher matcher = RemoteConstants.PATTERN.matcher(message);
            if (matcher.find()) {

                String maskedMessage ="";
                if(StringUtils.isNotBlank(matcher.group(1))&& matcher.group(1).length()==RemoteConstants.CARD_NUMBER_LENGTH){
                    StringBuffer masked = new StringBuffer();

                    masked.append(matcher.group(1).substring(0, 4)).append(" ");
                    masked.append(matcher.group(1).substring(4, 6)).append("XX ");
                    masked.append("XXXX ").append(matcher.group(1).substring(12, 16));

                    maskedMessage=masked.toString();
                }else{
                    maskedMessage = matcher.replaceAll(RemoteConstants.MASK);
                }

                Throwable throwable = event.getThrowableInformation() != null ? event.getThrowableInformation()
                        .getThrowable() : null;
                LoggingEvent maskedEvent = new LoggingEvent(event.fqnOfCategoryClass, Logger.getLogger(event
                        .getLoggerName()), event.timeStamp, event.getLevel(), maskedMessage, throwable);
                return super.format(maskedEvent);
            }
        }

        return super.format(event);
    }
}

Answer 1

你有什么办法移除所有对System.out.println的调用，或者用对记录器的调用来代替它们吗？

否则，如果您确实不能纠正原始代码，您是否考虑过通过使用System.setOut覆盖System.out？您可以设置一个print，它检测到输入的字符串是一个卡号，并对其进行掩码--正常打印其余内容……？

类似于：

PrintStream underlyingOut = System.out;
System.setOut(new PrintStream(underlyingOut) {
    @Override
    public void println(String x) {
        if(x.matches("[0-9\\-]+")) {
            super.println(x.replaceAll("[0-9]", "X"));
        } else {
            super.println(x);
        }
    }
});

System.out.println("Hello");
System.out.println("123-4567-89");

这会减慢System.out.println调用的速度，但它会输出：

Hello
XXX-XXXX-XX

哈！