From d7359c00fb084cc14f7dfde4c782142f15bcd480 Mon Sep 17 00:00:00 2001 From: Nikolay Chashnikov Date: Wed, 24 Mar 2021 17:39:51 +0300 Subject: [PATCH] [api] mark log4j 1.2 as deprecated and scheduled for removal (IDEA-265069) With this annotation direct usages of log4j classes from external plugins will be highlighted as errors, it should encourage plugin developers to use IntelliJ Logging API or migrate to modern logging frameworks. GitOrigin-RevId: 8bfb5be950e7abfb9fbd1f6c6d2e77ba89fa0215 --- platform/util/src/org/apache/log4j/package-info.java | 11 +++++++++++ 1 file changed, 11 insertions(+) create mode 100644 platform/util/src/org/apache/log4j/package-info.java diff --git a/platform/util/src/org/apache/log4j/package-info.java b/platform/util/src/org/apache/log4j/package-info.java new file mode 100644 index 000000000000..895bad1cd4a9 --- /dev/null +++ b/platform/util/src/org/apache/log4j/package-info.java @@ -0,0 +1,11 @@ +// Copyright 2000-2021 JetBrains s.r.o. Use of this source code is governed by the Apache 2.0 license that can be found in the LICENSE file. +/** + * Log4j 1.2 contains security vulnerability (CVE-2019-17571) so + * it shouldn't be used. For code in IntelliJ plugins it's recommended to use {@link com.intellij.openapi.diagnostic.Logger IntelliJ Logging API} + * directly. + */ +@Deprecated +@ApiStatus.ScheduledForRemoval(inVersion = "2021.3") +package org.apache.log4j; + +import org.jetbrains.annotations.ApiStatus; \ No newline at end of file