CVE-2021-44228-Scanner
CVE-2021-44228-Scanner copied to clipboard
Facilitate exclusions by leveraging the "find" command
On unix systems: Instead of using java to scan the filesystem, use "find", launched from java, to enumerate the files you're going to scan.
Advantages:
- Doesn't follow symlinks
- Can reliably stop at filesystem boundaries (-xdev)
- Will reduce the memory consumption of the java process
- All unixes have it
I will document how to use find command with log4j2-scan -f
option. :D