Update on Log4Shell Vulnerability (CVE-2021-44228)

A post was split to a new topic: Does javascriptProtection:false impose any risk?