3 ms·

That's an interesting idea. Although denying network to log4j wouldn't have stopped this I think, as it was the JNDI code that made the network calls, not log4

That's an interesting idea. Although denying network to log4j wouldn't have stopped this I think, as it was the JNDI code that made the network calls, not log4j directly.

creatonez 5y ago
Depends how capabilities work in the system. A restriction could prevent something from occurring at all in a bit of code, even in outside calls.
nicoburns 5y ago
You might be able to be more specific and only allow network connections to whitelisted addresses or similar.