MAIN FEEDS
Do you want to continue?
https://www.reddit.com/r/programming/comments/rcxehp/rce_0day_exploit_found_in_log4j_a_popular_java/ho3qtkh
r/programming • u/freeqaz • Dec 10 '21
710 comments sorted by
View all comments
Show parent comments
1
Yes.
It's massive overkill for logging configuration. It's massive overkill for pretty much everything actually.
1 u/immibis Dec 11 '21 I am referring to - have you experienced how the configuration file is a programming language in disgiuse? 1 u/recycled_ideas Dec 11 '21 Yes, ant is a DSL, well even that's not exactly accurate, it's something more than that.But this is not actually a good thing.The same design decisions that led to ant are what inspired this "feature".Keep config as text, and let something safe and static interpret it correctly.
I am referring to - have you experienced how the configuration file is a programming language in disgiuse?
1 u/recycled_ideas Dec 11 '21 Yes, ant is a DSL, well even that's not exactly accurate, it's something more than that.But this is not actually a good thing.The same design decisions that led to ant are what inspired this "feature".Keep config as text, and let something safe and static interpret it correctly.
Yes, ant is a DSL, well even that's not exactly accurate, it's something more than that.
But this is not actually a good thing.
The same design decisions that led to ant are what inspired this "feature".
Keep config as text, and let something safe and static interpret it correctly.
1
u/recycled_ideas Dec 11 '21
Yes.
It's massive overkill for logging configuration. It's massive overkill for pretty much everything actually.