From a70fa805719c30bcd774437c38abaa96f20b0244 Mon Sep 17 00:00:00 2001
From: Madhura Bhave <bhavem@vmware.com>
Date: Tue, 22 Feb 2022 15:44:50 -0800
Subject: [PATCH] Rectify incorrect sanitizing regex example provided in how-to
 docs

Closes gh-29951
---
 .../spring-boot-docs/src/docs/asciidoc/howto/actuator.adoc      | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/spring-boot-project/spring-boot-docs/src/docs/asciidoc/howto/actuator.adoc b/spring-boot-project/spring-boot-docs/src/docs/asciidoc/howto/actuator.adoc
index 1474d9806717..86866b89bdf5 100644
--- a/spring-boot-project/spring-boot-docs/src/docs/asciidoc/howto/actuator.adoc
+++ b/spring-boot-project/spring-boot-docs/src/docs/asciidoc/howto/actuator.adoc
@@ -37,7 +37,7 @@ See also the section on "`<<features#features.developing-web-applications.spring
 [[howto.actuator.sanitize-sensitive-values]]
 === Sanitize Sensitive Values
 Information returned by the `env` and `configprops` endpoints can be somewhat sensitive so keys matching certain patterns are sanitized by default (i.e. their values are replaced by `+******+`). Spring Boot uses sensible defaults for such keys: any key ending with the word "password", "secret", "key", "token", "vcap_services", "sun.java.command" is entirely sanitized.
-Additionally, any key that holds the word `credentials` (configured as a regular expression, i.e. `+*credentials.*+`) as part of the key is also entirely sanitized.
+Additionally, any key that holds the word `credentials` (configured as a regular expression, i.e. `+.*credentials.*+`) as part of the key is also entirely sanitized.
 
 Furthermore, Spring Boot sanitizes the sensitive portion of URI-like values for keys with one of the following endings: