Disable message pattern lookup by default

2021-12-10 03:26:21 +08:00
parent 55092326a4
commit c31269a358
1 changed files with 3 additions and 0 deletions
--- a/HMCLCore/src/main/java/org/jackhuang/hmcl/launch/DefaultLauncher.java
+++ b/HMCLCore/src/main/java/org/jackhuang/hmcl/launch/DefaultLauncher.java
@@ -178,6 +178,9 @@ public class DefaultLauncher extends Launcher {

            res.addDefault("-Dfml.ignoreInvalidMinecraftCertificates=", "true");
            res.addDefault("-Dfml.ignorePatchDiscrepancies=", "true");
+
+            // Fix RCE vulnerability of log4j2
+            res.addDefault("-Dlog4j2.formatMsgNoLookups=", "true");
        }

        Proxy proxy = options.getProxy();