Tagged articles

JEP 536

2 articles · Page 1 of 1

Oct 5, 2026 · Backend Development

Java 27 JFR Now Auto-Redacts Passwords: Why Your Diagnostic Files Were Leaking Secrets

Java 27 introduces JFR in-process data redaction (JEP 536) that automatically masks sensitive environment variables, system properties, and JVM arguments matching default glob patterns like *password*, *secret*, *token*, and *api*key*, with support for custom patterns via FlightRecorderOptions, though custom JFR events and child processes remain unprotected.

JEP 536JFRJVM

0 likes · 13 min read

Java 27 JFR Now Auto-Redacts Passwords: Why Your Diagnostic Files Were Leaking Secrets

LuTiao Programming

Sep 15, 2026 · Backend Development

Java 27 JFR Auto-Redaction: Automatic Secret Masking in Diagnostic Files

Java 27 introduces JFR in-process data redaction (JEP 536) that automatically masks sensitive values like passwords, tokens, and API keys in environment variables, system properties, and JVM arguments within flight recordings, using default glob patterns and allowing custom rules via FlightRecorderOptions, though custom JFR events and child processes remain unprotected.

Data RedactionFlight RecorderJEP 536

0 likes · 12 min read

Java 27 JFR Auto-Redaction: Automatic Secret Masking in Diagnostic Files