How Log4Shell came to exist

DEC 17 2021

An analysis of the Log4j flaw that goes back through the library's feature history and the earlier issues that made the JNDI lookup path possible, rather than only demonstrating the exploit. Covers how a decade-old design decision produced the disclosure.