Change ESAPI logger to SLF4J

GeoCat · Nov 28, 2024 · a56607c · a56607c
1 parent 92c20ba
commit a56607c
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/web/src/main/webapp/WEB-INF/classes/ESAPI.properties b/web/src/main/webapp/WEB-INF/classes/ESAPI.properties
@@ -68,11 +68,12 @@ ESAPI.HTTPUtilities=org.owasp.esapi.reference.DefaultHTTPUtilities
 ESAPI.IntrusionDetector=org.owasp.esapi.reference.DefaultIntrusionDetector
 # Log4JFactory Requires log4j.xml or log4j.properties in classpath - http://www.laliluna.de/log4j-tutorial.html
 # Note that this is now considered deprecated!
-ESAPI.Logger=org.owasp.esapi.logging.log4j.Log4JLogFactory
+#ESAPI.Logger=org.owasp.esapi.logging.log4j.Log4JLogFactory
 #ESAPI.Logger=org.owasp.esapi.logging.java.JavaLogFactory
 # To use the new SLF4J logger in ESAPI (see GitHub issue #129), set
 #    ESAPI.Logger=org.owasp.esapi.logging.slf4j.Slf4JLogFactory
 # and do whatever other normal SLF4J configuration that you normally would do for your application.
+ESAPI.Logger=org.owasp.esapi.logging.slf4j.Slf4JLogFactory
 ESAPI.Randomizer=org.owasp.esapi.reference.DefaultRandomizer
 ESAPI.Validator=org.owasp.esapi.reference.DefaultValidator