[
https://issues.apache.org/jira/browse/RATIS-1477?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Tsz-wo Sze resolved RATIS-1477.
-------------------------------
Fix Version/s: 2.3.0
Resolution: Fixed
Thanks [~adoroszlai] for reviewing the pull request.
I have merged it.
> Exclude log4j JMSAppender.class in jar
> --------------------------------------
>
> Key: RATIS-1477
> URL: https://issues.apache.org/jira/browse/RATIS-1477
> Project: Ratis
> Issue Type: Improvement
> Components: build
> Reporter: Tsz-wo Sze
> Assignee: Tsz-wo Sze
> Priority: Major
> Fix For: 2.3.0
>
> Time Spent: 20m
> Remaining Estimate: 0h
>
> According to https://www.slf4j.org/log4shell.html ,
> {quote}
> ..., log4j 1.x comes with JMSAppender which will perform a JNDI lookup if
> enabled in log4j's configuration file, i.e. log4j.properties or log4j.xml.
> {quote}
> Therefore, it is better to exclude JMSAppender.class from the generated jar.
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
