logpresso / CVE-2021-44228-Scanner

Vulnerability scanner and mitigation patch for Log4j2 CVE-2021-44228
Apache License 2.0
851 stars 174 forks source link

Difference between exclude-config and exclude-file-config #256

Closed greg-michael closed 2 years ago

greg-michael commented 2 years ago

These definitions seem to indicate that these options provide the same functionality.

-exclude-config [config_file_path] Specify exclude path prefix list in text file. Paths should be separated by new line. Prepend # for comment. --exclude-file-config [config_file_path] Specify exclude file path list in text file. Paths should be separated by new line. Prepend # for comment.

xeraph commented 2 years ago

@greg-michael

greg-michael commented 2 years ago

The way I interpreted the first sentence of the definition for the --exclude-file-config was that the user would specify the path to the exclude file, not that the file would contain the full path to files to be excluded.

Thanks.

From: Yang, BongYeol (xeraph) @.> Sent: Friday, January 21, 2022 01:54 To: logpresso/CVE-2021-44228-Scanner @.> Cc: Greg Michael @.>; Mention @.> Subject: Re: [logpresso/CVE-2021-44228-Scanner] Difference between exclude-config and exclude-file-config (Issue #256)

This email did not originate from Canadian Pacific. Please exercise caution with any links or attachments.


@greg-michaelhttps://urldefense.com/v3/__https:/github.com/greg-michael__;!!Iww4!yTC8rmy2EeVHdIcaXLFGZaDKLSrwU9XMa3ULmwxerEKqqnAGfC7y3AS1ThSXPxyx9w$

— Reply to this email directly, view it on GitHubhttps://urldefense.com/v3/__https:/github.com/logpresso/CVE-2021-44228-Scanner/issues/256*issuecomment-1018264819__;Iw!!Iww4!yTC8rmy2EeVHdIcaXLFGZaDKLSrwU9XMa3ULmwxerEKqqnAGfC7y3AS1ThShAZXdKg$, or unsubscribehttps://urldefense.com/v3/__https:/github.com/notifications/unsubscribe-auth/AJ6SVAVF5MQXOOR247LLVSTUXEGJHANCNFSM5MNBYMUA__;!!Iww4!yTC8rmy2EeVHdIcaXLFGZaDKLSrwU9XMa3ULmwxerEKqqnAGfC7y3AS1ThRMI5F7vw$. Triage notifications on the go with GitHub Mobile for iOShttps://urldefense.com/v3/__https:/apps.apple.com/app/apple-store/id1477376905?ct=notification-email&mt=8&pt=524675__;!!Iww4!yTC8rmy2EeVHdIcaXLFGZaDKLSrwU9XMa3ULmwxerEKqqnAGfC7y3AS1ThRwgVzDMA$ or Androidhttps://urldefense.com/v3/__https:/play.google.com/store/apps/details?id=com.github.android&referrer=utm_campaign*3Dnotification-email*26utm_medium*3Demail*26utm_source*3Dgithub__;JSUlJSU!!Iww4!yTC8rmy2EeVHdIcaXLFGZaDKLSrwU9XMa3ULmwxerEKqqnAGfC7y3AS1ThQOKJBZFw$. You are receiving this because you were mentioned.Message ID: @.**@.>>

------------------------------ IMPORTANT NOTICE - AVIS IMPORTANT ------------------------------ Computer viruses can be transmitted via email. Recipient should check this email and any attachments for the presence of viruses. Sender and sender company accept no liability for any damage caused by any virus transmitted by this email. This email transmission and any accompanying attachments contain confidential information intended only for the use of the individual or entity named above. Any dissemination, distribution, copying or action taken in reliance on the contents of this email by anyone other than the intended recipient is strictly prohibited. If you have received this email in error please immediately delete it and notify sender at the above email address. Le courrier electronique peut etre porteur de virus informatiques. Le destinataire doit donc passer le present courriel et les pieces qui y sont jointes au detecteur de virus. L' expediteur et son employeur declinent toute responsabilite pour les dommages causes par un virus contenu dans le courriel. Le present message et les pieces qui y sont jointes contiennent des renseignements confidentiels destines uniquement a la personne ou a l' organisme nomme ci-dessus. Toute diffusion, distribution, reproduction ou utilisation comme reference du contenu du message par une autre personne que le destinataire est formellement interdite. Si vous avez recu ce courriel par erreur, veuillez le detruire immediatement et en informer l' expediteur a l' adresse ci-dessus. ------------------------------ IMPORTANT NOTICE - AVIS IMPORTANT ------------------------------