X-Git-Url: http://git.argeo.org/?a=blobdiff_plain;f=security%2Fruntime%2Forg.argeo.security.core%2Fsrc%2Fmain%2Fjava%2Forg%2Fargeo%2Fsecurity%2Fcore%2FConsoleCallbackHandler.java;h=faa81b004aee9bfb7335b44463abfe87b273fb4f;hb=3a3d316af102ba410d1d9e6de349d0c8f7ac044f;hp=3bd4b57f0a0792c1d8f717995959245de4ea671f;hpb=7e6177f94240b17ed5f858de4821883346ee0538;p=lgpl%2Fargeo-commons.git

diff --git a/security/runtime/org.argeo.security.core/src/main/java/org/argeo/security/core/ConsoleCallbackHandler.java b/security/runtime/org.argeo.security.core/src/main/java/org/argeo/security/core/ConsoleCallbackHandler.java
index 3bd4b57f0..faa81b004 100644
--- a/security/runtime/org.argeo.security.core/src/main/java/org/argeo/security/core/ConsoleCallbackHandler.java
+++ b/security/runtime/org.argeo.security.core/src/main/java/org/argeo/security/core/ConsoleCallbackHandler.java
@@ -3,6 +3,7 @@ package org.argeo.security.core;
 import java.io.Console;
 import java.io.IOException;
 import java.io.PrintWriter;
+import java.util.Arrays;
 import java.util.Locale;
 
 import javax.security.auth.callback.Callback;
@@ -47,6 +48,7 @@ public class ConsoleCallbackHandler implements CallbackHandler {
 				writer.write(callback.getPrompt());
 				char[] answer = console.readPassword();
 				callback.setPassword(answer);
+				Arrays.fill(answer, ' ');
 			} else if (callbacks[i] instanceof LocaleCallback) {
 				LocaleCallback callback = (LocaleCallback) callbacks[i];
 				writer.write(callback.getPrompt());