Reference implementation of the LogFactory interface. This implementation uses the Apache Log4J package, and marks each
log message with the currently logged in user and the word "SECURITY" for security related events. See the
JavaLogFactory.JavaLogger Javadocs for the details on the JavaLogger reference implementation.
At class initialization time, the file log4j.properties or log4j.xml file will be loaded from the classpath. This configuration file is
fundamental to make log4j work for you. Please see http://logging.apache.org/log4j/1.2/manual.html for more information.
Note that
you must specify the LogFactory in either log4j.properties:
log4j.loggerFactory=org.owasp.esapi.reference.Log4JLoggerFactory
or log4j.xml:
<loggerFactory class="org.owasp.esapi.reference.Log4JLoggerFactory"/>