> the Java fans will be along soon to tell us all how awesome Java is for the web
well, there's no Java2Shell at least.
well, there's no Java2Shell at least.
Ahem, cough....
Log4Shell (CVE-2021-44228)
Seriously. You're moving goalposts. I think we both know how popular Log4j is and how many millions of Java deployments that Log4j vulnerability affected.