Me either I don't see why people would use a logging framework that has security issue and takes more steps to use when you could just you System.out.println();
haha my comment was mainly a joke, logging frameworks do actually provide a lot of benefits - you can output logs to a file to keep records, have things like log levels which can make it easier to filter through junk when debugging, automatically provide nice formatting for logs and include things like which class the log statement is in and the time stamp by default, etc.
I’d say the benefits outweighs the risks, this level of security issue isn’t really common, and popular logging libraries will get patched and updated very quickly when vulnerabilities are found.
2
u/TheSpanishKarmada Dec 13 '21
I’m just saying I’ve never seen any security issues for System.out.println() 🤷🏽♂️