recommendations icon indicating copy to clipboard operation
recommendations copied to clipboard

Published 20 hours ago • verified publisher icon guardian

Add recommendation for logging in .json format to scala recommendations

Open michaelwmcnamara opened this issue 2 years ago • 1 comments

What does this change?

When logging in .json format for a scala app, it is necessary to use net.logstash.logback.encoder.LogstashEncoder. When using this with Play 8.x you are exposed to a Denial of Service vulnerability in the Jackson library used by this version of Play. This change documents this problem and adds details for the current workaround to resolve this issue.

Trello card: https://trello.com/c/tiXyFoIv/1259-support-ingesting-json-logs-and-define-best-practice-on-this

michaelwmcnamara avatar May 13 '22 17:05 michaelwmcnamara

I'm not sure we're at the recommendation stage yet? Should we add this to the proposal doc instead for now? cc @guardian/devx-operations.

akash1810 avatar May 16 '22 20:05 akash1810