3 ms·
To enable the mitigation for Apache Tomcat, set `JAVA_OPTS=-Dlog4j2.formatMsgNoLookups=true` For instance, when starting with systemd, add `Environment=JAVA_OP
by simon04 5y ago
To enable the mitigation for Apache Tomcat, set `JAVA_OPTS=-Dlog4j2.formatMsgNoLookups=true`
For instance, when starting with systemd, add `Environment=JAVA_OPTS=-Dlog4j2.formatMsgNoLookups=true` to your service file.
You should find `Command line argument: -Dlog4j2.formatMsgNoLookups=true` in catalina.out
- philipwhiuk 5y agoAssuming you're running Log4J > 2.10.0 otherwise this won't be picked up and used.