Merge pull request #1065 from yh-semmle/java-frameworks-notes

Java: update frameworks list for 1.20 release

Author: Felicity Chapman

change-notes/1.20/analysis-java.md

@@ -29,7 +29,7 @@
   collections, maps, and iterators. This affects all security queries, which
   can report more results based on such paths.
 * The `FlowSources` and `TaintTracking` libraries are extended to cover additional remote user
-  input and taint steps from the Apache Thrift, Apache Struts, Guice and Protobuf frameworks.
+  input and taint steps from the following frameworks: Guice, Protobuf, Thrift and Struts.
   This affects all security queries, which may yield additional results on projects
   that use these frameworks.
 

change-notes/1.20/support/java-frameworks.csv

@@ -3,8 +3,11 @@ Hibernate, Database
 iBatis / MyBatis, Database
 Java Persistence API (JPA), Database
 JDBC, Database
+Protobuf, Serialization
 Kryo deserialization, Serialization
 SnakeYaml, Serialization
 Spring JDBC, Database
 Spring MVC, Web application framework
+Struts, Web application framework
+Thrift, RPC framework
 XStream, Serialization