Piotr Karwasz created LOGGING-188:
-------------------------------------
Summary: Deprecate and disable Lumberjack and Log4j 1.x logger
Key: LOGGING-188
URL: https://issues.apache.org/jira/browse/LOGGING-188
Project: Commons Logging
Issue Type: Bug
Affects Versions: 1.2
Reporter: Piotr Karwasz
The [Lumberjack|https://javalogging.sourceforge.net/] and [Log4j
1.x|https://logging.apache.org/log4j/1.2/] logging backends have reach
end-of-life in 2002 and 2015 respectively.
To provide a "secure by default" configuration the {{Jdk13LumberjackLogger}}
and {{Log4JLogger}} should be:
* deprecated for removal in 2.x,
* disabled by default.
Users would need to enable these backends explicitly by setting the value of
the property '{{org.apache.commons.logging.Log}}' to the fully qualified name
of the logger ('{{org.apache.commons.logging.impl.Jdk13LumberjackLogger}}' or
'{{org.apache.commons.logging.impl.Log4JLogger}}') in either Java's system
properties or a {{commons-logging.properties}} file on the classpath.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
