[ 
https://issues.apache.org/jira/browse/LOG4J2-3211?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17459048#comment-17459048
 ] 

Christian commented on LOG4J2-3211:
-----------------------------------

On your website are since today wrong information:
https://logging.apache.org/log4j/2.x/
Today: specify the message converter as %m{nnolookups}
Today: %m{nnolookups}

Yesterday: %m{nolookups}

I would highly suggest to correct your website again, as people copy paste this 
fix and because of the second ā€œnā€ not secured against the lookups.

> Remove support for Lookups in messages
> --------------------------------------
>
>                 Key: LOG4J2-3211
>                 URL: https://issues.apache.org/jira/browse/LOG4J2-3211
>             Project: Log4j 2
>          Issue Type: Story
>          Components: Pattern Converters
>    Affects Versions: 2.15.0
>            Reporter: Ralph Goers
>            Priority: Major
>             Fix For: 2.16.0
>
>
> Log a message if either the lookup or nolookup option is specified on %m. 
> Remove calls to StrSubstitutor.replace().



--
This message was sent by Atlassian Jira
(v8.20.1#820001)

Reply via email to