LOG4J2-1959 Mention in release notes
Project: http://git-wip-us.apache.org/repos/asf/logging-log4j2/repo Commit: http://git-wip-us.apache.org/repos/asf/logging-log4j2/commit/74449738 Tree: http://git-wip-us.apache.org/repos/asf/logging-log4j2/tree/74449738 Diff: http://git-wip-us.apache.org/repos/asf/logging-log4j2/diff/74449738 Branch: refs/heads/LOG4J2-1958 Commit: 74449738c08d2ea98926dcc205213d9ff5014b6c Parents: 04acee2 Author: Mikael Ståldal <[email protected]> Authored: Thu Jun 29 17:41:56 2017 +0200 Committer: Mikael Ståldal <[email protected]> Committed: Thu Jun 29 17:41:56 2017 +0200 ---------------------------------------------------------------------- src/changes/announcement.vm | 3 +++ src/site/xdoc/manual/configuration.xml.vm | 2 +- 2 files changed, 4 insertions(+), 1 deletion(-) ---------------------------------------------------------------------- http://git-wip-us.apache.org/repos/asf/logging-log4j2/blob/74449738/src/changes/announcement.vm ---------------------------------------------------------------------- diff --git a/src/changes/announcement.vm b/src/changes/announcement.vm index 6168aba..e06994e 100644 --- a/src/changes/announcement.vm +++ b/src/changes/announcement.vm @@ -50,6 +50,9 @@ temporary objects) while logging. In addition, Log4j 2 will not lose events whil This release primarily contains bugfixes and minor enhancements. More details on the new features and fixes are itemized below. +Note that subsequent to the 2.9 release, for security reasons, Log4j does not process DTD in XML files. +If you used DTD for including snippets, you have to use XInclude or Composite Configuration instead. + Note that subsequent to the 2.6 release a minor source incompatibility was found due to the addition of new methods to the Logger interface. If you have code that does: http://git-wip-us.apache.org/repos/asf/logging-log4j2/blob/74449738/src/site/xdoc/manual/configuration.xml.vm ---------------------------------------------------------------------- diff --git a/src/site/xdoc/manual/configuration.xml.vm b/src/site/xdoc/manual/configuration.xml.vm index b5f7af2..b70b306 100644 --- a/src/site/xdoc/manual/configuration.xml.vm +++ b/src/site/xdoc/manual/configuration.xml.vm @@ -358,7 +358,7 @@ public class Bar { <a name="ConfigurationSyntax"/> <subsection name="Configuration Syntax"> <p> - As of version 2.9, for security reasons, Log4j does not process DTDs in XML files. + As of version 2.9, for security reasons, Log4j does not process DTD in XML files. If you want to split the configuration in multiple files, use <a href="#XInclude">XInclude</a> or <a href="#CompositeConfiguration">Composite Configuration</a>. </p>
