1 files changed, 17 insertions, 1 deletions
diff --git a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/servlet/AuthServlet.java b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/servlet/AuthServlet.java
index ddd1df628..0656d37d3 100644
--- a/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/servlet/AuthServlet.java
+++ b/id/server/idserverlib/src/main/java/at/gv/egovernment/moa/id/auth/servlet/AuthServlet.java
@@ -161,10 +161,26 @@ public class AuthServlet extends HttpServlet implements MOAIDAuthConstants {
         if (item.isFormField())
         {
           // Process only form fields - no file upload items
+          String logString =  item.getString("UTF-8");
+       
+          // TODO use RegExp
+          String startS = "<pr:Identification><pr:Value>";
+          String endS = "</pr:Value><pr:Type>urn:publicid:gv.at:baseid</pr:Type>";
+          String logWithMaskedBaseid = logString;
+          int start = logString.indexOf(startS);
+          if (start > -1) {
+             int end = logString.indexOf(endS);
+             if (end > -1) {
+                logWithMaskedBaseid = logString.substring(0, start);
+                logWithMaskedBaseid += startS;
+                logWithMaskedBaseid += "xxxxxxxxxxxxxxxxxxxxxxxx";
+                logWithMaskedBaseid += logString.substring(end, logString.length());
+             }
+          }
           parameters.put(item.getFieldName(), item.getString("UTF-8"));
           Logger.debug("Processed multipart/form-data request parameter: \nName: " +
               item.getFieldName() + "\nValue: " + 
-              item.getString("UTF-8"));
+              logWithMaskedBaseid);
         }
       }
     }