Skip to content

Commit e4fc652

Browse files
Log4J Removal (ESAPI#714)
Close issue ESAPI#534 - This is a planned removal of all Log4J 1 dependencies after nearly 2 years of deprecation. The release for this will be released on or shortly after 2022-07-13. * Suppression cleanup Clearing log4j1 suppressions from baseline. Should cause maven site goal to fail if cleanup is not incomplete. * Log4J 1.x Source & Dependency Removal Removing baseline code & tests pertaining to log4j 1.x support. Removing log4j 1.x dependency from pom. * WAF Cleanup - Removing customized Log handling AppGuardianConfiguration had a declaration of a log4j log Level class which appears to never be used. ESAPIWebApplicationFirewallFilter attempts to compliment/override a pre-existing log4j1.x configuratino through the filterConfig with an expectation that ESAPI is configured for that Logger explicitly. * This has just been removed to allow the implementation to use the ESAPI Logger as configured. * Removing ant-javadoc.xml artifact Javadocs are generated in the maven build through the javadoc maven plugin. * log4j 1.x configuration file removal Remvoing log4j.dtd and log4j.xml instances from baseline. * log4j 1.x - Removing references in properties Cleaning up source and test references to the removed content. * log4j 1.x cleanup - scripts Removing log4j class contexts from the release process scripts. * JAVADOC CLEANUP Addressing warnings in javadoc generation. * Case sensitivity addressed in SecurityConfiguration. * Removed invalid class reference from Logger. This would have been an update; however, the reference point no longer fufills the reason for the initial link. This commit is superfluous to the log4j1.x removal intention of the branch where it was committed. * Merging suppressions file * Version updates Applying the latest plugin and dependency versions. * Comment Grammer cleanup. PR feedback.
1 parent 232c27d commit e4fc652

29 files changed

+444
-2555
lines changed

ant-javadoc.xml

Lines changed: 0 additions & 8 deletions
This file was deleted.

configuration/esapi/ESAPI.properties

Lines changed: 0 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -66,9 +66,6 @@ ESAPI.Encryptor=org.owasp.esapi.reference.crypto.JavaEncryptor
6666
ESAPI.Executor=org.owasp.esapi.reference.DefaultExecutor
6767
ESAPI.HTTPUtilities=org.owasp.esapi.reference.DefaultHTTPUtilities
6868
ESAPI.IntrusionDetector=org.owasp.esapi.reference.DefaultIntrusionDetector
69-
# Log4JFactory Requires log4j.xml or log4j.properties in classpath - http://www.laliluna.de/log4j-tutorial.html
70-
# Note that this is now considered deprecated!
71-
#ESAPI.Logger=org.owasp.esapi.logging.log4j.Log4JLogFactory
7269
ESAPI.Logger=org.owasp.esapi.logging.java.JavaLogFactory
7370
# To use the new SLF4J logger in ESAPI (see GitHub issue #129), set
7471
# ESAPI.Logger=org.owasp.esapi.logging.slf4j.Slf4JLogFactory

configuration/log4j.dtd

Lines changed: 0 additions & 227 deletions
This file was deleted.

0 commit comments

Comments
 (0)