Log4jPatcher
Spring Boot
| Log4jPatcher | Spring Boot | |
|---|---|---|
| 2 | 167 | |
| 46 | 72,961 | |
| - | 0.8% | |
| 0.0 | 10.0 | |
| over 1 year ago | 3 days ago | |
| Java | Java | |
| MIT License | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Log4jPatcher
-
Cisco AMP/Endpoint is not a great product for Endpoint Security.
https://github.com/CreeperHost/Log4jPatcher - Double nope
-
RCE 0-day exploit found in log4j, a popular Java logging package
The folks over at CreeperHost have created a Java agent that patches log4j2, for people who can't update it for whatever reason. https://github.com/CreeperHost/Log4jPatcher
Spring Boot
- JHipster 8 - Analisando o código da nossa primeira aplicação monolítica - Parte 2/3
-
Walmart is migrating the remaining F# code into Java
- Usually manually wired and configured vs the spring boot "starter" pattern of having libraries that automatically do some of the manual setup work for you: https://github.com/spring-projects/spring-boot/blob/main/spr...
I wish more client library sets had the feature-matrix that the pulsar one does, because in practice most end up being the same: Java supports everything because it's either built in the same codebase or is the most used client and gets the most support, while the dotnet client codebase has many feature-requests or performance improvement issues, often leading to a "third-party client" being created.
- AI PR adds auto generated comments to whole Spring Boot Project
-
AI commented the entire Spring Boot codebase
https://github.com/spring-projects/spring-boot/pull/39754/co...
-
Spring Boot 3 And Java 17 Migration Guide
If you’re currently running with an earlier version of Spring Boot, I recommend that you upgrade to Spring Boot 2.7 before migrating to Spring Boot 3.0. It minimizes compatibility issues as much as possible.
- Spring Boot 3.2.0 Release Notes
-
The Game of Life, the Universe, and Everything: Java Virtual Threads in Action
Okay, we need to build the game? No problem, we will use Spring Boot and Swing!
-
Netflix Uses Java
It's weird that some people including you directly attack my competence. As a power user you should have plenty of experience getting something to work that is not properly document, does not work how the documentation promised it to, or has weird problems on top of it. Look at idiotic things like this:
https://github.com/spring-projects/spring-boot/issues/33044
Take any similar issue and you'll see a bunch of people who try to find a solution for them because they just aren't repeatable at all. The underlying issue is the auto configuration doing things you can't follow quite properly. It's like it wasn't mean to be understood. Issues like the one I linked above also show me that the spring dev crowd also doesn't understand the ecosystem anymore. The problem is complexity and automagic.
-
What's New in Spring Framework 6.1
An interested reader can decide for themselves:
https://github.com/spring-projects/spring-boot/tree/main/spr...
-
Secure Java URL encoding and decoding
Explicitly decoding URL query parameters occurs less often because many frameworks, including Spring Boot, handle decoding automatically.
What are some alternatives?
local-log4j-vuln-scanner - Simple local scanner for vulnerable log4j instances
helidon - Java libraries for writing microservices
Logback - The reliable, generic, fast and flexible logging framework for Java.
Play - The Community Maintained High Velocity Web Framework For Java and Scala.
coq - Coq is a formal proof management system. It provides a formal language to write mathematical definitions, executable algorithms and theorems together with an environment for semi-interactive development of machine-checked proofs.
javalin - A simple and modern Java and Kotlin web framework [Moved to: https://github.com/javalin/javalin]
Doubly-Linked-List-VST - The final project for CS2603 (2021 Spring), aiming to verify a doubly linked list library using VST. Collaborating with @karzexcc
Quarkus - Quarkus: Supersonic Subatomic Java.
ysoserial - A proof-of-concept tool for generating payloads that exploit unsafe Java object deserialization.
Jooby - The modular web framework for Java and Kotlin
Log4jAttackSurface
ZK - ZK is a highly productive Java framework for building amazing enterprise web and mobile applications