zhangyoufu edited a comment on pull request #608:
URL: https://github.com/apache/logging-log4j2/pull/608#issuecomment-990305306


   You can't ask everybody to upgrade to 2.15 at once. And the 
`formatMsgNoLookups` option is available to log4j ≥ 2.10 only.
   
   Thanks to 
[LOG4J2-703](https://github.com/apache/logging-log4j2/commit/3203d3eab6bdd12fdad7ded1860db16a89468c3f),
 I think it's quite safe to remove 
`org/apache/logging/log4j/core/lookup/JndiLookup.class` from `log4j-core-*.jar` 
as a workaround. Just `zip -q -d log4j-core-*.jar 
org/apache/logging/log4j/core/lookup/JndiLookup.class` to disable `${jndi:...}` 
functionality completely.
   
   I posted all log4j-core jar with `JndiLookup.class` removed at 
https://github.com/zhangyoufu/log4j2-without-jndi for reference. Simple local 
test looks promising.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to