You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@logging.apache.org by mi...@apache.org on 2017/06/29 15:50:24 UTC

[3/5] logging-log4j2 git commit: LOG4J2-1959 Mention in release notes

LOG4J2-1959 Mention in release notes


Project: http://git-wip-us.apache.org/repos/asf/logging-log4j2/repo
Commit: http://git-wip-us.apache.org/repos/asf/logging-log4j2/commit/74449738
Tree: http://git-wip-us.apache.org/repos/asf/logging-log4j2/tree/74449738
Diff: http://git-wip-us.apache.org/repos/asf/logging-log4j2/diff/74449738

Branch: refs/heads/LOG4J2-1958
Commit: 74449738c08d2ea98926dcc205213d9ff5014b6c
Parents: 04acee2
Author: Mikael Ståldal <mi...@staldal.nu>
Authored: Thu Jun 29 17:41:56 2017 +0200
Committer: Mikael Ståldal <mi...@staldal.nu>
Committed: Thu Jun 29 17:41:56 2017 +0200

----------------------------------------------------------------------
 src/changes/announcement.vm               | 3 +++
 src/site/xdoc/manual/configuration.xml.vm | 2 +-
 2 files changed, 4 insertions(+), 1 deletion(-)
----------------------------------------------------------------------


http://git-wip-us.apache.org/repos/asf/logging-log4j2/blob/74449738/src/changes/announcement.vm
----------------------------------------------------------------------
diff --git a/src/changes/announcement.vm b/src/changes/announcement.vm
index 6168aba..e06994e 100644
--- a/src/changes/announcement.vm
+++ b/src/changes/announcement.vm
@@ -50,6 +50,9 @@ temporary objects) while logging. In addition, Log4j 2 will not lose events whil
 This release primarily contains bugfixes and minor enhancements. More details on the new features and
 fixes are itemized below.
 
+Note that subsequent to the 2.9 release, for security reasons, Log4j does not process DTD in XML files.
+If you used DTD for including snippets, you have to use XInclude or Composite Configuration instead.
+
 Note that subsequent to the 2.6 release a minor source incompatibility was found due to the
 addition of new methods to the Logger interface. If you have code that does:
 

http://git-wip-us.apache.org/repos/asf/logging-log4j2/blob/74449738/src/site/xdoc/manual/configuration.xml.vm
----------------------------------------------------------------------
diff --git a/src/site/xdoc/manual/configuration.xml.vm b/src/site/xdoc/manual/configuration.xml.vm
index b5f7af2..b70b306 100644
--- a/src/site/xdoc/manual/configuration.xml.vm
+++ b/src/site/xdoc/manual/configuration.xml.vm
@@ -358,7 +358,7 @@ public class Bar {
         <a name="ConfigurationSyntax"/>
         <subsection name="Configuration Syntax">
           <p>
-            As of version 2.9, for security reasons, Log4j does not process DTDs in XML files.
+            As of version 2.9, for security reasons, Log4j does not process DTD in XML files.
             If you want to split the configuration in multiple files, use <a href="#XInclude">XInclude</a> or
             <a href="#CompositeConfiguration">Composite Configuration</a>.
           </p>