From 172e78dca7d3b9245a0a6897b03f4b2be9f333f9 Mon Sep 17 00:00:00 2001 From: modmuss50 Date: Fri, 10 Dec 2021 10:59:14 +0000 Subject: [PATCH] Apply mitigation's against Log4J2 exploit CVE-2021-44228. (cherry picked from commit 4eb0290bb40c1a5ca5ec27161c73d8965f062bb2) (cherry picked from commit ae6109c09c33f0d4d5fcce1feb87a5cf562281ea) --- .../loom/configuration/providers/LaunchProvider.java | 1 + src/main/resources/log4j2.fabric.xml | 12 ++++++------ 2 files changed, 7 insertions(+), 6 deletions(-) diff --git a/src/main/java/net/fabricmc/loom/configuration/providers/LaunchProvider.java b/src/main/java/net/fabricmc/loom/configuration/providers/LaunchProvider.java index 3eac5bbe..20a9ca03 100644 --- a/src/main/java/net/fabricmc/loom/configuration/providers/LaunchProvider.java +++ b/src/main/java/net/fabricmc/loom/configuration/providers/LaunchProvider.java @@ -58,6 +58,7 @@ public class LaunchProvider extends DependencyProvider { .property("fabric.development", "true") .property("fabric.remapClasspathFile", getRemapClasspathFile().getAbsolutePath()) .property("log4j.configurationFile", getAllLog4JConfigFiles()) + .property("log4j2.formatMsgNoLookups", "true") .property("client", "java.library.path", getExtension().getNativesDirectory().getAbsolutePath()) .property("client", "org.lwjgl.librarypath", getExtension().getNativesDirectory().getAbsolutePath()) diff --git a/src/main/resources/log4j2.fabric.xml b/src/main/resources/log4j2.fabric.xml index 1feeddd6..c009f9fb 100644 --- a/src/main/resources/log4j2.fabric.xml +++ b/src/main/resources/log4j2.fabric.xml @@ -7,7 +7,7 @@ - + @@ -15,9 +15,9 @@ - + - + @@ -25,9 +25,9 @@ - + - + @@ -38,7 +38,7 @@ - +