Hello Vladimir, I am not sure if you received Piotrs message below - please let us know :)
Kind regards, Christian -- The Apache Software Foundation V.P., Data Privacy On Thu, Oct 5, 2023, at 22:05, Piotr P. Karwasz wrote: > Hi Vladimir, > > On Thu, 5 Oct 2023 at 21:47, Klebanov, Vladimir > <vladimir.kleba...@sap.com.invalid> wrote: >> I would like to contribute some code in order to make log4j usage more >> secure. I have now sent two emails to the log4j security team but did not >> receive a response. Is anybody here interested? How can we discuss this >> further? > > Both times (10 Aug 2023, 23:19 and 29 Aug 2023, 20:49) we sent an > answer to your address at sap.com. > > Anyway the general consensus was that the issue with generating HTML > using PatternLayout does not constitute a security problem and you can > discuss it on this mailing list or file an issue in Github issues. > > Piotr
