mohamedS615 opened a new issue, #3857: URL: https://github.com/apache/logging-log4j2/issues/3857
You can't ask everybody to upgrade to 2.15 at once. And the `formatMsgNoLookups` option is available to log4j ≥ 2.10 only. Thanks to [LOG4J2-703](https://github.com/apache/logging-log4j2/commit/3203d3eab6bdd12fdad7ded1860db16a89468c3f), I think it's quite safe to remove `org/apache/logging/log4j/core/lookup/JndiLookup.class` from `log4j-core-*.jar` as a workaround. Just `zip -q -d log4j-core-*.jar org/apache/logging/log4j/core/lookup/JndiLookup.class` to disable `${jndi:...}` functionality completely. I posted all log4j-core jar with `JndiLookup.class` removed at https://github.com/zhangyoufu/log4j2-without-jndi for reference. Simple local test looks promising. _Originally posted by @zhangyoufu in https://github.com/apache/logging-log4j2/issues/608#issuecomment-990305306_ -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: notifications-unsubscr...@logging.apache.org.apache.org For queries about this service, please contact Infrastructure at: us...@infra.apache.org