Hacker News Reader

Cloudflare has published an article with clear mitigation options: https://blog.cloudflare.com/cve-2021-44228-log4j-rce-0-day-m...

Given the severity, we've also rolled this out to our Free plan customers, who don't otherwise have access to the WAF.

Do you look and block for evasion attempts like:

${j${lower:n}${lower:d}i...}

?