feat(crashtracking): Align some filtering with JDK JEP-8372760

JDK JEP-8372760 (JFR In-Process Data Redaction)

Author: bric3

dd-java-agent/agent-crashtracking/src/main/java/datadog/crashtracking/parsers/RuntimeArgs.java

@@ -19,8 +19,9 @@
  * module/native-access options.
  */
 final class RuntimeArgs {
+  // Aligned with JDK JEP-8372760 (JFR In-Process Data Redaction) default filter list.
   private static final String[] SECRET_PROPERTY_KEYWORDS = {
-    "password", "passwd", "secret", "token", "key", "credential"
+    "auth", "password", "passwd", "pwd", "passphrase", "secret", "token", "key", "credential"
   };
   private static final String[] MODULE_OPTIONS = {
     "--add-modules",

dd-java-agent/agent-crashtracking/src/test/java/datadog/crashtracking/parsers/RuntimeArgsTest.java

@@ -59,14 +59,17 @@ public void testParseVmArgsHandlesArgNormalization(String raw, String expectedIn
   }
 
   @TableTest({
-    "scenario                    | raw                               | isIncluded | vmArg                            ",
-    "java password excluded      | -Djava.net.password=hunter2       | false      | -Djava.net.password=hunter2      ",
-    "sun token excluded          | -Dsun.auth.token=abc123           | false      | -Dsun.auth.token=abc123          ",
-    "dd api key excluded         | -Ddd.api-key=deadbeef             | false      | -Ddd.api-key=deadbeef            ",
-    "dd app key excluded         | -Ddd.app-key=deadbeef             | false      | -Ddd.app-key=deadbeef            ",
-    "dd application key excluded | -Ddd.application-key=deadbeef     | false      | -Ddd.application-key=deadbeef    ",
-    "java logging kept           | -Djava.util.logging.config.file=x | true       | -Djava.util.logging.config.file=x",
-    "osgi install kept           | -Dosgi.install.area=/opt/app      | true       | -Dosgi.install.area=/opt/app     "
+    // Exclusion patterns are aligned with JDK JEP-8372760 (JFR In-Process Data Redaction).
+    "scenario                       | raw                                                   | isIncluded | vmArg                                                ",
+    "jaas login config excluded     | -Djava.security.auth.login.config=/etc/jaas.conf      | false      | -Djava.security.auth.login.config=/etc/jaas.conf     ",
+    "java socks password excluded   | -Djava.net.socks.password=hunter2                     | false      | -Djava.net.socks.password=hunter2                    ",
+    "dd pwd excluded                | -Ddd.db.pwd=hunter2                                   | false      | -Ddd.db.pwd=hunter2                                  ",
+    "dd passphrase excluded         | -Ddd.ssl.passphrase=topsecret                         | false      | -Ddd.ssl.passphrase=topsecret                        ",
+    "dd api key excluded            | -Ddd.api-key=deadbeef                                 | false      | -Ddd.api-key=deadbeef                                ",
+    "dd app key excluded            | -Ddd.app-key=deadbeef                                 | false      | -Ddd.app-key=deadbeef                                ",
+    "dd application key excluded    | -Ddd.application-key=deadbeef                         | false      | -Ddd.application-key=deadbeef                        ",
+    "java logging kept              | -Djava.util.logging.config.file=/opt/logging.props    | true       | -Djava.util.logging.config.file=/opt/logging.props   ",
+    "osgi install kept              | -Dosgi.install.area=/opt/app                          | true       | -Dosgi.install.area=/opt/app                         "
   })
   public void testParseVmArgsExcludesSecretLikeSystemProperties(
       String raw, boolean isIncluded, String vmArg) {