org.apache.logging.log4j.core.lookup

Class JndiLookup

java.lang.Object

org.apache.logging.log4j.core.lookup.AbstractLookup

org.apache.logging.log4j.core.lookup.JndiLookup

All Implemented Interfaces:

org.apache.logging.log4j.core.lookup.StrLookup

@Plugin(name="jndi",
        category="Lookup")
public class JndiLookup
extends org.apache.logging.log4j.core.lookup.AbstractLookup

Dummy replacement for Log4j's original JndiLookup class It is intended to replace the class affected by CVE-2021-44228 and CVE-2021-45046

Field Summary

Fields inherited from interface org.apache.logging.log4j.core.lookup.StrLookup

CATEGORY

Constructor Summary

Constructors

Constructor and Description
JndiLookup()

Method Summary

Modifier and Type	Method and Description
static boolean	isSafe4j() Marker method - this allows us to detect that JndiLookup class is H2O's placeholder and not the actual implementation.
java.lang.String	lookup(org.apache.logging.log4j.core.LogEvent event, java.lang.String key)

Methods inherited from class org.apache.logging.log4j.core.lookup.AbstractLookup

lookup

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

JndiLookup

public JndiLookup()

Method Detail

lookup

public java.lang.String lookup(org.apache.logging.log4j.core.LogEvent event,
                               java.lang.String key)

isSafe4j

public static boolean isSafe4j()

Marker method - this allows us to detect that JndiLookup class is H2O's placeholder and not the actual implementation. We can use it to develop extension that verifies that H2O is not vulnerable.

Returns:

always true