Explorar o código

SEC-1070: AbstractRetryEntryPoint always uses RetryWithHttpEntryPoint logger. Converted to protected (non-static) and used getClass().

Luke Taylor %!s(int64=16) %!d(string=hai) anos
pai
achega
ccf422af5a

+ 1 - 1
core/src/main/java/org/springframework/security/securechannel/AbstractRetryEntryPoint.java

@@ -20,7 +20,7 @@ import java.io.IOException;
  */
 public abstract class AbstractRetryEntryPoint implements ChannelEntryPoint {
     //~ Static fields/initializers =====================================================================================
-    private static final Log logger = LogFactory.getLog(RetryWithHttpEntryPoint.class);
+    protected final Log logger = LogFactory.getLog(getClass());
 
     //~ Instance fields ================================================================================================