Personally I wonder whether anyone actually used log4j willingly or just because its generally used by all the apache projects and they wont start without it.
With a healthy dose of "use the latest versions" mentality.
I checked back and all my java code was still running log4j 1.1, and removing it has been on the todo list ever since it needed linking.
You should be checking all your 3rd party source code, "capabilities" wont get round that, the number of applications that dont need network access these days is as good as zero.
With a healthy dose of "use the latest versions" mentality.
I checked back and all my java code was still running log4j 1.1, and removing it has been on the todo list ever since it needed linking.
You should be checking all your 3rd party source code, "capabilities" wont get round that, the number of applications that dont need network access these days is as good as zero.