3 ms·

Replying to myself but I guess it's the second one. https://github.com/apache/logging-log4j2/blob/04637dd9102175f765cfad349de0c2a63c279ac3/log4j-core/src/main/

Replying to myself but I guess it's the second one. https://github.com/apache/logging-log4j2/blob/04637dd9102175f765cfad349de0c2a63c279ac3/log4j-core/src/main/java/org/apache/logging/log4j/core/util/Constants.java#L57-L68 https://github.com/apache/logging-log4j2/blob/04637dd9102175...

JackGreyhat 5y ago
Confirmed. Its the "log4j2.formatMsgNoLookups" property. Source: https://logging.apache.org/log4j/2.x/security.html https://logging.apache.org/log4j/2.x/security.html