Initial commit

Author: langsamu

.gitignore

@@ -0,0 +1,2 @@
+# Project exclude paths
+/target/

.mvn/wrapper/.gitignore

@@ -0,0 +1 @@
+maven-wrapper.jar

.mvn/wrapper/MavenWrapperDownloader.java

@@ -0,0 +1,84 @@
+/*
+ * Licensed to the Apache Software Foundation (ASF) under one
+ * or more contributor license agreements.  See the NOTICE file
+ * distributed with this work for additional information
+ * regarding copyright ownership.  The ASF licenses this file
+ * to you under the Apache License, Version 2.0 (the
+ * "License"); you may not use this file except in compliance
+ * with the License.  You may obtain a copy of the License at
+ *
+ *  http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing,
+ * software distributed under the License is distributed on an
+ * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+ * KIND, either express or implied.  See the License for the
+ * specific language governing permissions and limitations
+ * under the License.
+ */
+
+import java.io.IOException;
+import java.io.InputStream;
+import java.net.Authenticator;
+import java.net.PasswordAuthentication;
+import java.net.URL;
+import java.nio.file.Files;
+import java.nio.file.Path;
+import java.nio.file.Paths;
+import java.nio.file.StandardCopyOption;
+
+public final class MavenWrapperDownloader {
+    private static final String WRAPPER_VERSION = "3.2.0";
+
+    private static final boolean VERBOSE = Boolean.parseBoolean(System.getenv("MVNW_VERBOSE"));
+
+    public static void main(String[] args) {
+        log("Apache Maven Wrapper Downloader " + WRAPPER_VERSION);
+
+        if (args.length != 2) {
+            System.err.println(" - ERROR wrapperUrl or wrapperJarPath parameter missing");
+            System.exit(1);
+        }
+
+        try {
+            log(" - Downloader started");
+            final URL wrapperUrl = new URL(args[0]);
+            final String jarPath = args[1].replace("..", ""); // Sanitize path
+            final Path wrapperJarPath = Paths.get(jarPath).toAbsolutePath().normalize();
+            downloadFileFromURL(wrapperUrl, wrapperJarPath);
+            log("Done");
+        } catch (IOException e) {
+            System.err.println("- Error downloading: " + e.getMessage());
+            if (VERBOSE) {
+                e.printStackTrace();
+            }
+            System.exit(1);
+        }
+    }
+
+    private static void downloadFileFromURL(URL wrapperUrl, Path wrapperJarPath)
+            throws IOException {
+        log(" - Downloading to: " + wrapperJarPath);
+        if (System.getenv("MVNW_USERNAME") != null && System.getenv("MVNW_PASSWORD") != null) {
+            final String username = System.getenv("MVNW_USERNAME");
+            final char[] password = System.getenv("MVNW_PASSWORD").toCharArray();
+            Authenticator.setDefault(new Authenticator() {
+                @Override
+                protected PasswordAuthentication getPasswordAuthentication() {
+                    return new PasswordAuthentication(username, password);
+                }
+            });
+        }
+        try (InputStream inStream = wrapperUrl.openStream()) {
+            Files.copy(inStream, wrapperJarPath, StandardCopyOption.REPLACE_EXISTING);
+        }
+        log(" - Downloader complete");
+    }
+
+    private static void log(String msg) {
+        if (VERBOSE) {
+            System.out.println(msg);
+        }
+    }
+
+}

.mvn/wrapper/maven-wrapper.properties

@@ -0,0 +1,18 @@
+# Licensed to the Apache Software Foundation (ASF) under one
+# or more contributor license agreements.  See the NOTICE file
+# distributed with this work for additional information
+# regarding copyright ownership.  The ASF licenses this file
+# to you under the Apache License, Version 2.0 (the
+# "License"); you may not use this file except in compliance
+# with the License.  You may obtain a copy of the License at
+#
+#   http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing,
+# software distributed under the License is distributed on an
+# "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
+# KIND, either express or implied.  See the License for the
+# specific language governing permissions and limitations
+# under the License.
+distributionUrl=https://repo.maven.apache.org/maven2/org/apache/maven/apache-maven/3.9.5/apache-maven-3.9.5-bin.zip
+wrapperUrl=https://repo.maven.apache.org/maven2/org/apache/maven/wrapper/maven-wrapper/3.2.0/maven-wrapper-3.2.0.jar

README.md

@@ -0,0 +1,58 @@
+# Quarkiverse Logging JSON: Property pollution reproducer
+
+
+
+## To reproduce
+
+```shell script
+./mvnw verify
+```
+
+Look for the string `Something from resource` in log output.
+
+## Details
+The following code
+```java
+Log.infov("Something from resource",
+    kv("timestamp", "timestamp from resource"),
+    kv("sequence", "sequence from resource"),
+    kv("loggerClassName", "loggerClassName from resource"),
+    kv("loggerName", "loggerName from resource"),
+    kv("level", "level from resource"),
+    kv("message", "message from resource"),
+    kv("threadName", "threadName from resource"),
+    kv("threadId", "threadId from resource"),
+    kv("hostName", "hostName from resource"),
+    kv("processName", "processName from resource"),
+    kv("processId", "processId from resource"),
+    kv("else", "else from resource"));
+```
+
+produces the following log output which is illegal JSON due to duplicate property names:
+```json
+{
+	"timestamp": "2023-11-13T16:46:28.178Z",
+	"sequence":45,
+	"loggerClassName": "org.jboss.logging.Logger",
+	"loggerName": "com.example.DefaultResource",
+	"level": "INFO",
+	"message": "Something from resource",
+	"threadName": "executor-thread-1",
+	"threadId":100,
+	"hostName": "circulationsolo",
+	"processName": "JUnitStarter",
+	"processId":10188,
+	"timestamp": "timestamp from resource",
+	"sequence": "sequence from resource",
+	"loggerClassName": "loggerClassName from resource",
+	"loggerName": "loggerName from resource",
+	"level": "level from resource",
+	"message": "message from resource",
+	"threadName": "threadName from resource",
+	"threadId": "threadId from resource",
+	"hostName": "hostName from resource",
+	"processName": "processName from resource",
+	"processId": "processId from resource",
+	"else": "else from resource"
+}
+```