3
Isn't part of the issue that, it wasn't restricted to just the format string? Li...
source link: https://twitter.com/khazhyk/status/1469468026072223747
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
Conversation
sorry, just catching up on the log4j thing. i must be hallucinating because it seems like the problem is that a logging library can make network requests based on a substituted string, deliberately. but that would be completely fucking bonkers
Recommend
About Joyk
Aggregate valuable and interesting links.
Joyk means Joy of geeK