From f43324e14140b99d42aed56af0b4b58dcf0dc841 Mon Sep 17 00:00:00 2001
From: Bartosz Stebel <implr@hackerspace.pl>
Date: Fri, 10 Dec 2021 17:52:49 +0100
Subject: fix(3p/apereo-cas): Mitigate CVE-2021-44228

Same approach as in cl/4270.

Change-Id: I3a5a3533ab97513a4b9d8cacc26d013b58441f93
---
 third_party/apereo-cas/overlay/etc/cas/config/log4j2.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'third_party/apereo-cas/overlay')

diff --git a/third_party/apereo-cas/overlay/etc/cas/config/log4j2.xml b/third_party/apereo-cas/overlay/etc/cas/config/log4j2.xml
index 3130a09f402d..d7d5bb65e904 100644
--- a/third_party/apereo-cas/overlay/etc/cas/config/log4j2.xml
+++ b/third_party/apereo-cas/overlay/etc/cas/config/log4j2.xml
@@ -17,7 +17,7 @@
     </Properties>
     <Appenders>
         <Console name="console" target="SYSTEM_OUT">
-            <PatternLayout pattern="%highlight{%d %p [%c] - &lt;%m&gt;}%n"/>
+            <PatternLayout pattern="%highlight{%d %p [%c] - &lt;%m{nolookups}&gt;}%n"/>
         </Console>
 
         <CasAppender name="casConsole">
-- 
cgit 1.4.1