This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Poor Logging Practice
From OWASP
Revision as of 00:05, 18 February 2009 by KirstenS (talk | contribs) (Poor Logging Practice: Logger Not Declared Static Final moved to Poor Logging Practice)
This is a Vulnerability. To view all vulnerabilities, please see the Vulnerability Category page.
- This article includes content generously donated to OWASP by
Last revision (mm/dd/yy): 02/18/2009
Description
Loggers should be declared to be static and final.
It is good programming practice to share a single logger object between all of the instances of a particular class and to use the same logger for the duration of the program.
Risk Factors
TBD
Examples
The following statement errantly declares a non-static logger.
private final Logger logger = Logger.getLogger(MyClass.class);
Related Attacks
Related Vulnerabilities
Related Controls
Related Technical Impacts
References
Note: A reference to related CWE or CAPEC article should be added when exists. Eg:
