4 ms·
Logging framework which is too flexible and too transparent for end users is one of the reasons behind log4shell IMHO.
by citrin_ru 4y ago
Logging framework which is too flexible and too transparent for end users is one of the reasons behind log4shell IMHO.
- BoorishBears 4y agoAgain, being pretty uncharitable. There is a vast and mighty ocean between "allow configurable targets" and intentionally supporting querying LDAP via string substitution. The kitchen sink approach is its own poison.