Disable message pattern lookup by default

HMCL-dev · Dec 10, 2021 · c31269a · c31269a
1 parent 5509232
commit c31269a
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/HMCLCore/src/main/java/org/jackhuang/hmcl/launch/DefaultLauncher.java b/HMCLCore/src/main/java/org/jackhuang/hmcl/launch/DefaultLauncher.java
@@ -178,6 +178,9 @@ private Command generateCommandLine(File nativeFolder) throws IOException {
 
             res.addDefault("-Dfml.ignoreInvalidMinecraftCertificates=", "true");
             res.addDefault("-Dfml.ignorePatchDiscrepancies=", "true");
+
+            // Fix RCE vulnerability of log4j2
+            res.addDefault("-Dlog4j2.formatMsgNoLookups=", "true");
         }
 
         Proxy proxy = options.getProxy();