Apply mitigation's against Log4J2 exploit CVE-2021-44228.
This commit is contained in:
		
							parent
							
								
									b550ca7857
								
							
						
					
					
						commit
						4eb0290bb4
					
				
					 2 changed files with 7 additions and 6 deletions
				
			
		|  | @ -58,6 +58,7 @@ public class LaunchProvider extends DependencyProvider { | ||||||
| 				.property("fabric.development", "true") | 				.property("fabric.development", "true") | ||||||
| 				.property("fabric.remapClasspathFile", getRemapClasspathFile().getAbsolutePath()) | 				.property("fabric.remapClasspathFile", getRemapClasspathFile().getAbsolutePath()) | ||||||
| 				.property("log4j.configurationFile", getAllLog4JConfigFiles()) | 				.property("log4j.configurationFile", getAllLog4JConfigFiles()) | ||||||
|  | 				.property("log4j2.formatMsgNoLookups", "true") | ||||||
| 
 | 
 | ||||||
| 				.property("client", "java.library.path", getExtension().getMinecraftProvider().nativesDir().getAbsolutePath()) | 				.property("client", "java.library.path", getExtension().getMinecraftProvider().nativesDir().getAbsolutePath()) | ||||||
| 				.property("client", "org.lwjgl.librarypath", getExtension().getMinecraftProvider().nativesDir().getAbsolutePath()) | 				.property("client", "org.lwjgl.librarypath", getExtension().getMinecraftProvider().nativesDir().getAbsolutePath()) | ||||||
|  |  | ||||||
|  | @ -7,7 +7,7 @@ | ||||||
| 			<PatternLayout> | 			<PatternLayout> | ||||||
| 				<LoggerNamePatternSelector defaultPattern="%style{[%d{HH:mm:ss}]}{blue} %highlight{[%t/%level]}{FATAL=red, ERROR=red, WARN=yellow, INFO=green, DEBUG=green, TRACE=blue} %style{(%logger{1})}{cyan} %highlight{%msg%n}{FATAL=red, ERROR=red, WARN=normal, INFO=normal, DEBUG=normal, TRACE=normal}" disableAnsi="${sys:fabric.log.disableAnsi:-true}"> | 				<LoggerNamePatternSelector defaultPattern="%style{[%d{HH:mm:ss}]}{blue} %highlight{[%t/%level]}{FATAL=red, ERROR=red, WARN=yellow, INFO=green, DEBUG=green, TRACE=blue} %style{(%logger{1})}{cyan} %highlight{%msg%n}{FATAL=red, ERROR=red, WARN=normal, INFO=normal, DEBUG=normal, TRACE=normal}" disableAnsi="${sys:fabric.log.disableAnsi:-true}"> | ||||||
| 					<!-- Dont show the logger name for minecraft classes--> | 					<!-- Dont show the logger name for minecraft classes--> | ||||||
| 					<PatternMatch key="net.minecraft.,com.mojang." pattern="%style{[%d{HH:mm:ss}]}{blue} %highlight{[%t/%level]}{FATAL=red, ERROR=red, WARN=yellow, INFO=green, DEBUG=green, TRACE=blue} %style{(Minecraft)}{cyan} %highlight{%msg%n}{FATAL=red, ERROR=red, WARN=normal, INFO=normal, DEBUG=normal, TRACE=normal}"/> | 					<PatternMatch key="net.minecraft.,com.mojang." pattern="%style{[%d{HH:mm:ss}]}{blue} %highlight{[%t/%level]}{FATAL=red, ERROR=red, WARN=yellow, INFO=green, DEBUG=green, TRACE=blue} %style{(Minecraft)}{cyan} %highlight{%msg{nolookups}%n}{FATAL=red, ERROR=red, WARN=normal, INFO=normal, DEBUG=normal, TRACE=normal}"/> | ||||||
| 				</LoggerNamePatternSelector> | 				</LoggerNamePatternSelector> | ||||||
| 			</PatternLayout> | 			</PatternLayout> | ||||||
| 		</Console> | 		</Console> | ||||||
|  | @ -15,9 +15,9 @@ | ||||||
| 		<!--	Vanilla server gui	--> | 		<!--	Vanilla server gui	--> | ||||||
| 		<Queue name="ServerGuiConsole" ignoreExceptions="true"> | 		<Queue name="ServerGuiConsole" ignoreExceptions="true"> | ||||||
| 			<PatternLayout> | 			<PatternLayout> | ||||||
| 				<LoggerNamePatternSelector defaultPattern="[%d{HH:mm:ss} %level] (%logger{1}) %msg%n"> | 				<LoggerNamePatternSelector defaultPattern="[%d{HH:mm:ss} %level] (%logger{1}) %msg{nolookups}%n"> | ||||||
| 					<!-- Dont show the logger name for minecraft classes--> | 					<!-- Dont show the logger name for minecraft classes--> | ||||||
| 					<PatternMatch key="net.minecraft.,com.mojang." pattern="[%d{HH:mm:ss} %level] %msg%n"/> | 					<PatternMatch key="net.minecraft.,com.mojang." pattern="[%d{HH:mm:ss} %level] %msg{nolookups}%n"/> | ||||||
| 				</LoggerNamePatternSelector> | 				</LoggerNamePatternSelector> | ||||||
| 			</PatternLayout> | 			</PatternLayout> | ||||||
| 		</Queue> | 		</Queue> | ||||||
|  | @ -25,9 +25,9 @@ | ||||||
| 		<!--	latest.log same as vanilla	--> | 		<!--	latest.log same as vanilla	--> | ||||||
| 		<RollingRandomAccessFile name="LatestFile" fileName="logs/latest.log" filePattern="logs/%d{yyyy-MM-dd}-%i.log.gz"> | 		<RollingRandomAccessFile name="LatestFile" fileName="logs/latest.log" filePattern="logs/%d{yyyy-MM-dd}-%i.log.gz"> | ||||||
| 			<PatternLayout> | 			<PatternLayout> | ||||||
| 				<LoggerNamePatternSelector defaultPattern="[%d{HH:mm:ss}] [%t/%level] (%logger{1}) %msg%n"> | 				<LoggerNamePatternSelector defaultPattern="[%d{HH:mm:ss}] [%t/%level] (%logger{1}) %msg{nolookups}%n"> | ||||||
| 					<!-- Dont show the logger name for minecraft classes--> | 					<!-- Dont show the logger name for minecraft classes--> | ||||||
| 					<PatternMatch key="net.minecraft.,com.mojang." pattern="[%d{HH:mm:ss}] [%t/%level] (Minecraft) %msg%n"/> | 					<PatternMatch key="net.minecraft.,com.mojang." pattern="[%d{HH:mm:ss}] [%t/%level] (Minecraft) %msg{nolookups}%n"/> | ||||||
| 				</LoggerNamePatternSelector> | 				</LoggerNamePatternSelector> | ||||||
| 			</PatternLayout> | 			</PatternLayout> | ||||||
| 			<Policies> | 			<Policies> | ||||||
|  | @ -38,7 +38,7 @@ | ||||||
| 
 | 
 | ||||||
| 		<!--	Debug log file	--> | 		<!--	Debug log file	--> | ||||||
| 		<RollingRandomAccessFile name="DebugFile" fileName="logs/debug.log" filePattern="logs/debug-%i.log.gz"> | 		<RollingRandomAccessFile name="DebugFile" fileName="logs/debug.log" filePattern="logs/debug-%i.log.gz"> | ||||||
| 			<PatternLayout pattern="[%d{HH:mm:ss}] [%t/%level] (%logger) %msg%n" /> | 			<PatternLayout pattern="[%d{HH:mm:ss}] [%t/%level] (%logger) %msg{nolookups}%n" /> | ||||||
| 
 | 
 | ||||||
| 			<!--	Keep 5 files max	--> | 			<!--	Keep 5 files max	--> | ||||||
| 			<DefaultRolloverStrategy max="5" fileIndex="min"/> | 			<DefaultRolloverStrategy max="5" fileIndex="min"/> | ||||||
|  |  | ||||||
		Loading…
	
		Reference in a new issue