private static void logValue(final String key, final String value) {

        // Fortify will report a violation here because of disclosure of potentially confidential information.
        // However, the configuration keys are not confidential, which makes this a non-issue / false positive.
        if (LOG.isInfoEnabled()) {
            final StringBuilder msg = new StringBuilder("Key found in configuration ('")
                    .append(key)
                    .append("'), using configured value (not disclosed here for security reasons)");
            LOG.info(msg.toString());
        }

        // Fortify will report a violation here because of disclosure of potentially confidential information.
        // The configuration VALUES are confidential. DO NOT activate DEBUG logging in production.
        if (LOG.isDebugEnabled()) {
            final StringBuilder msg = new StringBuilder("Key found in configuration ('")
                    .append(key)
                    .append("'), using configured value ('");
            if (value == null) {
                msg.append("null')");
            } else {
                msg.append(value).append("')");
            }
            LOG.debug(msg.toString());
        }
    }
private static void logValue ( final String key , final String value ) { if ( LOG . isInfoEnabled ( ) ) { final StringBuilder msg = new StringBuilder ( "Key found in configuration ('" ) . append ( key ) . append ( "'), using configured value (not disclosed here for security reasons)" ) ; LOG . info ( msg . toString ( ) ) ; } if ( LOG . isDebugEnabled ( ) ) { final StringBuilder msg = new StringBuilder ( "Key found in configuration ('" ) . append ( key ) . append ( "'), using configured value ('" ) ; if ( value == null ) { msg . append ( "null')" ) ; } else { msg . append ( value ) . append ( "')" ) ; } LOG . debug ( msg . toString ( ) ) ; } }
Create a log entry when a value has been successfully configured.

@param key   The configuration key
@param value The value that is being used