Securing Java Applications in the Age of Log4Shell