Re: [jetty-users] [jetty-dev] Jetty: Apache Log4j Tool : Zero Day in Ubi

[Shawn Heisey <eclipse@xxxxxxxxxxxx>]

On 12/16/2021 2:27 PM, Bill Ross via jetty-users wrote:
> It also seemed to explain why this java startup arg doesn't cause an 
> error with no log4j jar in my classpath:
>
>     ‐Dlog4j2.formatMsgNoLookups=True

Adding a system property to Java startup will not *directly* cause any 
problems.  For it to be a problem, something in the application would 
need to be looking for that property, and that component would need to 
explicitly do something (like throw an exception) to cause a problem. 
If nothing in the application is looking for that property, then it 
won't matter if it's there.

Thanks,
Shawn