北京 2 挂了

https://logging.apache.org/log4j/2.x/

News
CVE-2021-44228
The Log4j team has been made aware of a security vulnerability, CVE-2021-44228, that has been addressed in Log4j 2.15.0.

Log4j’s JNDI support has not restricted what names could be resolved. Some protocols are unsafe or can allow remote code execution. Log4j now limits the protocols by default to only java, ldap, and ldaps and limits the ldap protocols to only accessing Java primitive objects by default served on the local host.

One vector that allowed exposure to this vulnerability was Log4j’s allowance of Lookups to appear in log messages. As of Log4j 2.15.0 this feature is now disabled by default. While an option has been provided to enable Lookups in this fashion, users are strongly discouraged from enabling it.

社区版啊，完全够用。

@BeijingBaby license 满一年有终身当前版本能使用过的

@chengyiqun 系统 win10 oracle jdk 1.8

@Vegetable 是 windows 的

应该一个接口一个微服务

@liuxu swagger2 是可以的

我的 win10 没有设置自动移动到默认按钮 但是 idea 的会移动到按钮

所以你们都买了 License 还是 openJDK

对象 = new 对象

哪里不懂看哪里