| commit | 1b68b3de81a65bb2d22488b1f184d4884db6667a | [log] [tgz] |
|---|---|---|
| author | Piotr P. Karwasz <piotr.github@karwasz.org> | Wed Mar 19 22:25:38 2025 +0100 |
| committer | Piotr P. Karwasz <piotr.github@karwasz.org> | Wed Mar 19 22:25:38 2025 +0100 |
| tree | 32354018d2c1f1bb29a4f40ac8ddd0ab70d5bd3f | |
| parent | 1a7112a28219f778f2ed69e66da2623024cc97f1 [diff] |
Improve String concatenation best practice
This change splits the "don't use String concatenation" best practice into two parts:
- A recommendation concerning performance: string concatenation is not efficient if the logger is off.
- A security recommendation: format string must be constants to prevent `{}` placeholder injection.
The `${dangerousLookup}` part of the example is removed, since lookups are not executed since version `2.15.0`