X-Git-Url: https://feistymeow.org/gitweb/?a=blobdiff_plain;f=kona%2Flog4j.properties;h=361aa5781b229d18d89702c38c3fe27d85a4825e;hb=f16b93de00ccea16ac88c73e61ffe44f3a34d528;hp=ef68572b65c76408607be4c244913b2889f61fe8;hpb=e6ce0aa508c3ad1beb167fdf20732b24f383c651;p=feisty_meow.git

diff --git a/kona/log4j.properties b/kona/log4j.properties
index ef68572b..361aa578 100644
--- a/kona/log4j.properties
+++ b/kona/log4j.properties
@@ -5,7 +5,9 @@ log4j.rootCategory=, TTY, LOGFILE
 log4j.appender.TTY=org.apache.log4j.ConsoleAppender
 log4j.appender.TTY.Threshold=DEBUG
 log4j.appender.TTY.layout=org.apache.log4j.PatternLayout
-log4j.appender.TTY.layout.ConversionPattern=%d{yyyy-MM-dd HH:mm:ss.SSS} %-5p [%-28c{2}] - %m%n
+log4j.appender.TTY.layout.ConversionPattern=%d{yyyy-MM-dd HH:mm:ss.SSS} %-5p [%-28c{2}] - %m{nolookups}%n
+
+#NOTE: vulnerability with bare percent m style: https://news.ycombinator.com/item?id=29507263
 
 # LOGFILE is set to be a RollingFileAppender using a PatternLayout.
 log4j.appender.LOGFILE=org.apache.log4j.RollingFileAppender
@@ -14,5 +16,5 @@ log4j.appender.LOGFILE.MaxFileSize=10MB
 log4j.appender.LOGFILE.MaxBackupIndex=10
 log4j.appender.LOGFILE.Threshold=DEBUG
 log4j.appender.LOGFILE.layout=org.apache.log4j.PatternLayout
-log4j.appender.LOGFILE.layout.ConversionPattern=%d{yyyy-MM-dd HH:mm:ss.SSS} %-5p [%-28c{2}] - %m%n
+log4j.appender.LOGFILE.layout.ConversionPattern=%d{yyyy-MM-dd HH:mm:ss.SSS} %-5p [%-28c{2}] - %m{nolookups}%n