-Dlog4j.formatMsgNoLookups=true 或 -Dlog4j2.formatMsgNoLookups=true - 哪个正确？
-Dlog4j.formatMsgNoLookups=true OR -Dlog4j2.formatMsgNoLookups=true - which is correct?
哪个是正确的？
-Dlog4j.formatMsgNoLookups=真
-Dlog4j2.formatMsgNoLookups=真
或者两者都有效？
参考：
log4j: https://dev.to/composite/how-to-pass-the-log4j2-vulnerability-quick-453h
log4j2: 1) https://spring.io/blog/2021/12/10/log4j2-vulnerability-and-spring-boot
2) https://www.cvedetails.com/cve/CVE-2021-44228/
N) 还有更多...
编辑：如 this particular property was introduced in Log4j 2.10 and the only correct form is log4j2.formatMsgNoLookups (cf. source code).
大多数剩余属性有两种形式：2.10 之前的 log4j.* 遗留 属性 名称和新的规范化 log4j2.* 名称。详情见Log4j system properties：
Note that beginning in Log4j 2.10, all system property names have been normalized to follow a consistent naming scheme. While the old property names are still supported for backwards compatibility, it is recommended to update configurations to use the new style.
哪个是正确的？
-Dlog4j.formatMsgNoLookups=真
-Dlog4j2.formatMsgNoLookups=真
或者两者都有效？
参考：
log4j: https://dev.to/composite/how-to-pass-the-log4j2-vulnerability-quick-453h
log4j2: 1) https://spring.io/blog/2021/12/10/log4j2-vulnerability-and-spring-boot
2) https://www.cvedetails.com/cve/CVE-2021-44228/
N) 还有更多...
编辑：如log4j2.formatMsgNoLookups (cf. source code).
大多数剩余属性有两种形式：2.10 之前的 log4j.* 遗留 属性 名称和新的规范化 log4j2.* 名称。详情见Log4j system properties：
Note that beginning in Log4j 2.10, all system property names have been normalized to follow a consistent naming scheme. While the old property names are still supported for backwards compatibility, it is recommended to update configurations to use the new style.