Skip to content

ESAPI is not returning right logger level #780

Open
@SalmanMohammedTR

Description

@SalmanMohammedTR

Description :
org.owasp.esapi.Logger class methods always return true irrespective of root logger level.

  • isDebugEnabled()
  • isErrorEnabled()
  • isInfoEnabled()
  • isFatalEnabled()
  • isTraceEnabled()
  • isWarningEnabled()

Version : esapi-2.4.0.0

Analysis:
Since i am using SL4J noticed that while creating following object new Slf4JLogger(slf4JLogger, LOG_BRIDGE, Logger.ALL); the 3rd parameter always passed as ALL rather it should be taken from logback.xml file.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions