From de1f3db8ea95995072366d8b0e492bb6c27144d9 Mon Sep 17 00:00:00 2001
From: Milan Tyagi <milantyagi2004@gmail.com>
Date: Fri, 5 Jun 2026 16:52:03 +0530
Subject: [PATCH] OF-2009: Encrypt default value of encrypted properties

Updates the System Properties admin console page to mask the default
values of encrypted or sensitive properties (displaying "hidden" in the
Default column). This also automatically hides them in the edit form
default value field, preventing credential leakage in plain text.
---
 xmppserver/src/main/webapp/system-properties.jsp | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/xmppserver/src/main/webapp/system-properties.jsp b/xmppserver/src/main/webapp/system-properties.jsp
index cf9a9f2565..410dcc7ebc 100644
--- a/xmppserver/src/main/webapp/system-properties.jsp
+++ b/xmppserver/src/main/webapp/system-properties.jsp
@@ -220,6 +220,9 @@
                         <c:when test="${!property.systemProperty}">
                             <span class="hidden">unknown</span>
                         </c:when>
+                        <c:when test="${property.hidden}">
+                            <span class="hidden">hidden</span>
+                        </c:when>
                         <c:when test="${property.defaultDisplayValue == null}">
                             <span class="hidden">none</span>
                         </c:when>