-
-
Notifications
You must be signed in to change notification settings - Fork 1.7k
Closed as not planned
Description
You can't ask everybody to upgrade to 2.15 at once. And the formatMsgNoLookups
option is available to log4j ≥ 2.10 only.
Thanks to LOG4J2-703, I think it's quite safe to remove org/apache/logging/log4j/core/lookup/JndiLookup.class
from log4j-core-*.jar
as a workaround. Just zip -q -d log4j-core-*.jar org/apache/logging/log4j/core/lookup/JndiLookup.class
to disable ${jndi:...}
functionality completely.
I posted all log4j-core jar with JndiLookup.class
removed at https://github.com/zhangyoufu/log4j2-without-jndi for reference. Simple local test looks promising.
Originally posted by @zhangyoufu in #608 (comment)
Metadata
Metadata
Assignees
Labels
No labels
Type
Projects
Status
Done