No log4f security gap