Comment by positr0n

> alongside having log4j log untrusted user inputs

I'd think logging things like query parameters is extremely common.