-
Notifications
You must be signed in to change notification settings - Fork 32
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Fix: logging issue in quick-start application #402
Conversation
…-impl with slf4j-simple this will resolve the vulnerability issue aswell
@@ -4,7 +4,8 @@ dependencies { | |||
|
|||
compile group: 'com.google.code.gson', name: 'gson', version: '2.8.6' | |||
compile group: 'org.apache.httpcomponents', name: 'httpclient', version: '4.5.12' | |||
compile group: 'org.apache.logging.log4j', name: 'log4j-slf4j-impl', version: '2.13.3' | |||
compile group: 'org.slf4j', name: 'slf4j-simple', version: '1.7.30' |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I see this is a revert to the line that was there previously. That works, tested it. But I'm not sure if maybe new Apache logger might have different logging properties setup, and this line didn't need to be reverted and instead Apache logger might need a different setup. I'm not sure.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
No actually previously it was compile group: 'org.slf4j', name: 'slf4j-log4j12', version: '1.7.30' which was causing vulnerability issue due to transitive property of log4j. I now replaced it with alternative library slf4j-simple.
Pull Request Test Coverage Report for Build 1555
💛 - Coveralls |
Summary
Test plan
FSC and all unit tests should pass.