News for hackers. Stuff that matters.

A comment on Log4j RCE Found. Parent comment

Re:Log4j RCE Found by watwut on Saturday December 11, 2021 @12:17PM (#29522494)
The format string should not allow remote execution unless explicitly tuned on either.

Logging should not be the thing you have to sanitize.

[ Parent | on HN ]

There are no comments on this comment yet.