Question about LOGGER.setLevel(Level.OFF) in CCJSqlParserUtil and possible fix for Java 8 (v4.9)

[Kumarspens]

Hi JSqlParser team,

We’re integrating JSqlParser into one of our project, which operates in a high-security cloud environment. While using the library, we encountered an issue caused by the following static block in the CCJSqlParserUtil class:

static {
LOGGER.setLevel(Level.OFF);
}

In our environment, this programmatic change to the logger level triggers a security exception at runtime.

Could you please clarify:
1. What is the reason for explicitly setting the logger level to Level.OFF in this static block?
2. Would it be possible to remove or make this configurable in version 4.9?
• We’re currently limited to Java 8, and since v5.4 requires Java 11, upgrading isn’t an option for us.

If feasible, having this fix or configuration option in the Java 8–compatible v4.9 release would help us (and possibly others in similar environments) integrate the parser more safely.

Thanks a lot for your time and for maintaining such a great project! 🙏

[manticore-projects]

Greetings.

Since it is Open Source, you can simply do those changes for the last Java 8 compliant version by yourself.
Also, I don't see a reason why exactly this would be security relevant. Last but not least, you can use the Parser class directly instead the Util class.