Skip to content

Navigation Menu

Appearance settings

View all features
- BY COMPANY SIZE
  Enterprises
  Small and medium teams
  Startups
  Nonprofits
- BY USE CASE
  App Modernization
  DevSecOps
  DevOps
  CI/CD
  View all use cases
- BY INDUSTRY
  Healthcare
  Financial services
  Manufacturing
  Government
  View all industries
View all solutions
- EXPLORE BY TOPIC
  AI
  Software Development
  DevOps
  Security
  View all topics
- EXPLORE BY TYPE
  Customer stories
  Events & webinars
  Ebooks & reports
  Business insights
  GitHub Skills
- SUPPORT & SERVICES
  Documentation
  Customer support
  Community forum
  Trust center
  Partners
View all resources
- COMMUNITY
  GitHub SponsorsFund open source developers
- PROGRAMS
  Security Lab
  Maintainer Community
  GitHub Stars
  Archive Program
- REPOSITORIES
  Topics
  Trending
  Collections
- ENTERPRISE SOLUTIONS
  Enterprise platformAI-powered developer platform
- AVAILABLE ADD-ONS
  GitHub Advanced SecurityEnterprise-grade security features
  Copilot for BusinessEnterprise-grade AI features
  Premium SupportEnterprise-grade 24/7 support
Pricing

Appearance settings

You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session.

Dismiss alert

apache / logging-log4j2 Public

Notifications You must be signed in to change notification settings
Fork 1.7k
Star 3.6k

Code
Issues 152
Pull requests 60
Discussions
Actions
Projects
Security and quality
Insights

Additional navigation options

Code
Issues
Pull requests
Discussions
Actions
Projects
Security and quality
Insights

escape scope attribute names and values in DumpTag - #4316

#4316

Open

jmestwa-coder wants to merge 1 commit into

apache:2.xapache/logging-log4j2:2.xfrom

jmestwa-coder:taglib-dumptag-xss-escapejmestwa-coder/logging-log4j2:taglib-dumptag-xss-escapeCopy head branch name to clipboard

Conversation Commits1 (1)Checks Files changed

Open

escape scope attribute names and values in DumpTag#4316
jmestwa-coder wants to merge 1 commit into
apache:2.xfrom
jmestwa-coder:taglib-dumptag-xss-escape

escape scope attribute names and values in DumpTag

54f1587

Select commit

Loading

Failed to load commit list.

Uh oh!

There was an error while loading. Please reload this page.

Sign in for the full log view

codeql-analysis on: pull_request 10

analyze / Analyze

Dependabot Analyze PR on: pull_request

analyze-dependabot

build on: pull_request 30

build / build (macos-latest)

build / build (ubuntu-latest)

build / build (windows-latest)

deploy-snapshot

deploy-release

verify-reproducibility-snapshot

integration-test-snapshot

verify-reproducibility-release

integration-test-release

Code scanning results

CodeQL

Annotations

10 warnings

Build with Maven: log4j-api/src/main/java/org/apache/logging/log4j/message/ObjectArrayMessage.java#L77

getFormat() in org.apache.logging.log4j.message.Message has been deprecated

Build with Maven: log4j-api/src/main/java/org/apache/logging/log4j/message/MessageFormatMessage.java#L97

getFormat() in org.apache.logging.log4j.message.Message has been deprecated

Build with Maven: log4j-api/src/main/java/org/apache/logging/log4j/spi/AbstractLogger.java#L2996

getFormat() in org.apache.logging.log4j.message.Message has been deprecated

Build with Maven: log4j-api/src/main/java/org/apache/logging/log4j/message/LocalizedMessage.java#L202

getFormat() in org.apache.logging.log4j.message.Message has been deprecated

Build with Maven: log4j-api/src/main/java/org/apache/logging/log4j/message/FormattedMessage.java#L158

getFormat() in org.apache.logging.log4j.message.Message has been deprecated

Build with Maven: log4j-api/src/main/java/org/apache/logging/log4j/message/DefaultFlowMessageFactory.java#L82

getFormat() in org.apache.logging.log4j.message.Message has been deprecated

Build with Maven: log4j-api/src/main/java/org/apache/logging/log4j/message/DefaultFlowMessageFactory.java#L80

getFormat() in org.apache.logging.log4j.message.Message has been deprecated

Build with Maven: log4j-api/src/main/java/org/apache/logging/log4j/ThreadContext.java#L153

serializable class org.apache.logging.log4j.ThreadContext.NoOpThreadContextStack has no definition of serialVersionUID

Build with Maven: log4j-api/src/main/java/org/apache/logging/log4j/message/MapMessage.java#L157

getFormat() in org.apache.logging.log4j.message.Message has been deprecated

Build with Maven: log4j-api-java9/src/test/java/org/apache/logging/log4j/util/java9/StackLocatorTest.java#L50

[JdkObsolete] Stack is a nonstandard class that predates the Java Collections Framework; prefer ArrayDeque. Note that the Stack methods push/pop/peek correspond to the Deque methods addFirst/removeFirst/peekFirst.

analyze / Analyze

succeeded Sep 12, 2026 in 16m 51s

Loading

Re-running jobs...

Footer

© 2026 GitHub, Inc.

Footer navigation

Terms
Privacy
Security
Status
Community
Docs
Contact

You can’t perform that action at this time.