Provide a command line option to "unfix"

I know this seems a little odd, but if it is not hard to do, it would be really interesting if there was an --force-unfix option that would detect any where a JAR has been mitigated by this utility and roll it back by restoring the backed up file.

The reason for this is so that operations teams can run the scan and fix widely, but if an application is found to be broken after the fact, just roll back everything on the device where the breakage occurred.

There is a lot of hesitation to deploy this utility widely in production in the actual --fix --force-fix mode to mitigate because of “what if it breaks things”. Having an easy undo helps alleviate these concerns.

I wouldn’t consider this a high priority or anything, especially if it would be difficult, but I think it could be a very useful feature.

[xeraph]

As far as I know, spring boot application was the only case. (log4j2-scan < 1.5.0)

[bor8]

--restore is worth its weight in gold. I have had to use it so far with Geonetwork and the GDI-DE Registry.