Skip to content

Add recommendation for logging in .json format to scala recommendations#88

Open
michaelwmcnamara wants to merge 3 commits intomainfrom
add-logging-config-to-scala-recommendations
Open

Add recommendation for logging in .json format to scala recommendations#88
michaelwmcnamara wants to merge 3 commits intomainfrom
add-logging-config-to-scala-recommendations

Conversation

@michaelwmcnamara
Copy link
Contributor

What does this change?

When logging in .json format for a scala app, it is necessary to use net.logstash.logback.encoder.LogstashEncoder.
When using this with Play 8.x you are exposed to a Denial of Service vulnerability in the Jackson library used by this version of Play.
This change documents this problem and adds details for the current workaround to resolve this issue.

Trello card: https://trello.com/c/tiXyFoIv/1259-support-ingesting-json-logs-and-define-best-practice-on-this

@michaelwmcnamara michaelwmcnamara requested a review from a team May 13, 2022 17:32
@akash1810
Copy link
Member

akash1810 commented May 16, 2022

I'm not sure we're at the recommendation stage yet? Should we add this to the proposal doc instead for now? cc @guardian/devx-operations.

Copy link
Member

@johnduffell johnduffell left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

probably not needed any more now that play 2.8 is out of service and we should all be on play 3.0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants