[Esapi-user] log4j.xml should NOT be included in ESAPI.jar by default
augustd at codemagi.com
Fri Aug 6 18:21:13 EDT 2010
Incuding log4j.xml within the ESAPI jar file can cause your webapp's
global log4j settings to be overridden with the ESAPI settings.
For example, the default ESAPI log4j.xml logs to the console instead of
to a file, uses a conversion pattern that doesn't include the date, etc.
I suggest that an example log4j.xml file be included with the zip
download, but NOT be included in the jar.
CEO/Web Application Architect
More information about the Esapi-user