ESAPI.Logger Property in Service Catalog
Article ID: 231800
Updated On:
Products
CA Service Catalog
Issue/Introduction
In Service Catalog 17.2, in the 'ESAPI.properties' file 'ESAPI.Logger' is set as:
ESAPI.Logger=org.owasp.esapi.reference.Log4JLogFactory
In Service Catalog 17.3 RU11, the same property is set as:
ESAPI.Logger=org.owasp.esapi.reference.JavaLogFactory
Why the difference?
Environment
Service Catalog 17.3
All Supported Operating Systems
Resolution
The difference in the ESAPI.Logger property is a result of the migration of Log4j 1.x to Log4J 2.x in Service Catalog 17.3.
During the upgrade from Log4j 1.x to 2.x, we updated this configuration to 'JavaLogFactory'.
Based on the suggestion given by the ESAPI team, we used JavaLogManager as ESAPI logger.
With this change in configuration, there is no functionality change in the Service Catalog application.
Feedback
Yes
No
Powered by
