From f04cf16b6664304f7e8e1a7a2b1a309a6e82e100 Mon Sep 17 00:00:00 2001 From: Ceki Gulcu Date: Mon, 24 Jan 2022 00:07:40 +0100 Subject: [PATCH] fix comments, less bragging Signed-off-by: Ceki Gulcu --- slf4j-site/src/site/pages/css/site.css | 4 +- slf4j-site/src/site/pages/log4shell.html | 105 ----------------------- 2 files changed, 2 insertions(+), 107 deletions(-) diff --git a/slf4j-site/src/site/pages/css/site.css b/slf4j-site/src/site/pages/css/site.css index b8053940..d75cc12f 100755 --- a/slf4j-site/src/site/pages/css/site.css +++ b/slf4j-site/src/site/pages/css/site.css @@ -50,7 +50,7 @@ p.menu { "left content right"; max-width: 90rem; margin-left: 1rem; - # margin-right: auto; + /** margin-right: auto; **/ } @@ -83,7 +83,7 @@ p.menu { margin: 4px 4px 0px 0px; padding: 0px; background-color: #ffffff; - #border: 1px solid #cccccc; + /** #border: 1px solid #cccccc; **/ font-size: 80%; } diff --git a/slf4j-site/src/site/pages/log4shell.html b/slf4j-site/src/site/pages/log4shell.html index 0eb1cbfb..79df5863 100644 --- a/slf4j-site/src/site/pages/log4shell.html +++ b/slf4j-site/src/site/pages/log4shell.html @@ -235,111 +235,6 @@ owner. If possible, they should also be monitored against changes and unauthorized manipulation.

-

Prevalence of logging - frameworks

- -

As discussed above, while log4j 2.14 and earlier are - vulnerable to log4shell, log4j 1.x and logback are not.

- -

At this stage, it might be useful mention the prevalence of - each logging library in order to put things into - perspective. Here are the relevant figures as found - in mvnrepository site - on 2021-12-17.

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
ProjectCategorygroup:artifactusageCountpercentage
SLF4JAPIorg.slf4j:slf4j-api52,24769%
Commons-loggingAPIcommons-logging:commons-logging10,41214%
SLF4JAPIorg.slf4j:jcl-over-slf4j7,54610%
LOG4J2APIorg.apache.logging.log4j:log4j-api5,226 7%
TotalAPI -75,431 100%
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
ProjectCategorygroup:artifactusageCountpercentage
LOGBACKimplementationch.qos.logback:logback-classic21,77048%
LOG4J1implementationlog4j:log4j16,61037%
LOG4J2implementationorg.apache.logging.log4j:log4j-core6,97415%
Totalimplementaion -45,174 100%
- -

Notwithstanding its 48% prevalence overall (implementation), - no attacks have been reported against logback that we are aware - of.

Further reading