Hello Vladimir,

I am not sure if you received Piotrs message below - please let us know :)

Kind regards,
Christian

--
The Apache Software Foundation
V.P., Data Privacy

On Thu, Oct 5, 2023, at 22:05, Piotr P. Karwasz wrote:
> Hi Vladimir,
>
> On Thu, 5 Oct 2023 at 21:47, Klebanov, Vladimir
> <vladimir.kleba...@sap.com.invalid> wrote:
>> I would like to contribute some code in order to make log4j usage more 
>> secure. I have now sent two emails to the log4j security team but did not 
>> receive a response. Is anybody here interested? How can we discuss this 
>> further?
>
> Both times (10 Aug 2023, 23:19 and 29 Aug 2023, 20:49) we sent an
> answer to your address at sap.com.
>
> Anyway the general consensus was that the issue with generating HTML
> using PatternLayout does not constitute a security problem and you can
> discuss it on this mailing list or file an issue in Github issues.
>
> Piotr

Reply via email to