Minecraft Forge 1.16.4-35.1.32, with an *ACTUALLY* secure version of Log4j.
8cfca4376f
Right now the complete com.mojang package is excluded from the LaunchClassLoader on the server. This means mods can't transform authlib for example which doesn't need to be excluded for the UI to work. By excluding only the specific log4j2 QueueLogAppender, mods can also transform the classes in the com.mojang.authlib package. |
||
---|---|---|
fml |