title: How to avoid storing passwords in the clear for tomcat's server.xml Resource definition of a DataSource?
body: <p>The resource definition in tomcat's <code>server.xml</code> looks something like this...</p>
  
  <pre class="lang-xml prettyprint-override"><code>&lt;Resource
      name="jdbc/tox"
      scope="Shareable"
      type="javax.sql.DataSource"
      url="jdbc:oracle:thin:@yourDBserver.yourCompany.com:1521:yourDBsid"
      driverClassName="oracle.jdbc.pool.OracleDataSource"
      username="tox"
      password="toxbaby"
      maxIdle="3"
      maxActive="10"
      removeAbandoned="true"
      removeAbandonedTimeout="60"
      testOnBorrow="true"
      validationQuery="select * from dual"
      logAbandoned="true"
      debug="99"/&gt;
  </code></pre>
  
  <p>The password is in the clear.  How to avoid this?</p>