Hacker News new | ask | show | jobs
by JackGreyhat 1643 days ago
Confirmed. Its the "log4j2.formatMsgNoLookups" property. Source: https://logging.apache.org/log4j/2.x/security.html