Open
Description
Description :
org.owasp.esapi.Logger class methods always return true irrespective of root logger level.
- isDebugEnabled()
- isErrorEnabled()
- isInfoEnabled()
- isFatalEnabled()
- isTraceEnabled()
- isWarningEnabled()
Version : esapi-2.4.0.0
Analysis:
Since i am using SL4J noticed that while creating following object new Slf4JLogger(slf4JLogger, LOG_BRIDGE, Logger.ALL); the 3rd parameter always passed as ALL rather it should be taken from logback.xml file.