[Esapi-user] log4j.xml should NOT be included in ESAPI.jar by default

August Detlefsen augustd at codemagi.com
Fri Aug 6 18:21:13 EDT 2010

Incuding log4j.xml within the ESAPI jar file can cause your webapp's 
global log4j settings to be overridden with the ESAPI settings.

For example, the default ESAPI log4j.xml logs to the console instead of 
to a file, uses a conversion pattern that doesn't include the date, etc.

I suggest that an example log4j.xml file be included with the zip 
download, but NOT be included in the jar.


August Detlefsen
CEO/Web Application Architect
CodeMagi, Inc.

More information about the Esapi-user mailing list