8000 Disable JNDI lookups by comendantmc · Pull Request #6 · moom0o/Papaya · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content
This repository was archived by the owner on Jun 17, 2023. It is now read-only.

Disable JNDI lookups #6

8000 Merged
merged 1 commit into from
Dec 10, 2021
Merged

Disable JNDI lookups #6

merged 1 commit into from
Dec 10, 2021

Conversation

comendantmc
Copy link
Contributor
@comendantmc comendantmc commented Dec 10, 2021

This PR fixes the log4j2 vulnerability by replacing all occurrences of %msg with %msg{nolookups} as suggested here

@comendantmc
Copy link
Contributor Author
8000

It's not fixing client side I think, it's probably better to implement it in aef

@comendantmc
Copy link
Contributor Author

never mind I just noticed the same thing on the test branch

@moom0o moom0o reopened this Dec 10, 2021
@moom0o
Copy link
Owner
moom0o commented Dec 10, 2021

I was testing your pull request

@moom0o moom0o merged commit e591764 into moom0o:master Dec 10, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants
0