[jira] [Commented] (LOG4J2-3037) Add methods for logging untrusted arguments

2021-03-07 Thread Ralph Goers (Jira)
[ https://issues.apache.org/jira/browse/LOG4J2-3037?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17297060#comment-17297060 ] Ralph Goers commented on LOG4J2-3037: - As I recall we had discussed adding params in

[jira] [Created] (LOG4J2-3037) Add methods for logging untrusted arguments

2021-03-07 Thread Marcono1234 (Jira)
Marcono1234 created LOG4J2-3037: --- Summary: Add methods for logging untrusted arguments Key: LOG4J2-3037 URL: https://issues.apache.org/jira/browse/LOG4J2-3037 Project: Log4j 2 Issue Type: Impro

[jira] [Commented] (LOG4J2-2511) Turn Log Injection Defenses On By Default

2021-03-07 Thread Marcono1234 (Jira)
[ https://issues.apache.org/jira/browse/LOG4J2-2511?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17296998#comment-17296998 ] Marcono1234 commented on LOG4J2-2511: - I can only agree with the reporter, log injec

[GitHub] [logging-log4j2] vy edited a comment on pull request #472: Allow custom resolvers to be registered for JsonTemplateLayout

2021-03-07 Thread GitBox
vy edited a comment on pull request #472: URL: https://github.com/apache/logging-log4j2/pull/472#issuecomment-792336434 Yes, just set `log4j2.is.webapp` to `false` and `log4j2.enable.threadlocals` to `true`. This is an autom

[GitHub] [logging-log4j2] vy commented on pull request #472: Allow custom resolvers to be registered for JsonTemplateLayout

2021-03-07 Thread GitBox
vy commented on pull request #472: URL: https://github.com/apache/logging-log4j2/pull/472#issuecomment-792336434 Yes, just set both of the `log4j2.is.webapp` and `log4j2.enable.threadlocals` system properties to `true`. This

[CI][UNSTABLE] Logging/log4j/master#237 has test failures

2021-03-07 Thread Mr. Jenkins
BUILD UNSTABLE Build URL https://ci-builds.apache.org/job/Logging/job/log4j/job/master/237/ Project: master Date of build: Sun, 07 Mar 2021 07:47:41 + Build duration: 1 hr 23 min and counting JUnit Tests Name: liquibase.ext.logging.log4j2 Failed:

[jira] [Commented] (LOG4J2-2975) SLF4J fluent API fails to capture call site location due to missing LoggingEventAware implementation

2021-03-07 Thread Ralph Goers (Jira)
[ https://issues.apache.org/jira/browse/LOG4J2-2975?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17296801#comment-17296801 ] Ralph Goers commented on LOG4J2-2975: - I started on this but then realized that the