Merge pull request #733 from aschackmull/java/remove-old-dataflow

yh-semmle · web-flow · commit b8f53b5c6aff · 2019-01-08T14:59:27.000-05:00
Java: Remove old dataflow library.
diff --git a/change-notes/1.20/analysis-java.md b/change-notes/1.20/analysis-java.md
@@ -18,4 +18,10 @@
 
 ## Changes to QL libraries
 
+* The deprecated library `semmle.code.java.security.DataFlow` has been removed.
+  Improved data flow libraries have been available in
+  `semmle.code.java.dataflow.DataFlow`,
+  `semmle.code.java.dataflow.TaintTracking`, and
+  `semmle.code.java.dataflow.FlowSources` since 1.16.
+
 
diff --git a/java/ql/src/filters/ImportAdditionalLibraries.ql b/java/ql/src/filters/ImportAdditionalLibraries.ql
@@ -10,7 +10,6 @@
 import java
 import semmle.code.java.dataflow.Guards
 import semmle.code.java.dataflow.ParityAnalysis
-import semmle.code.java.security.DataFlow
 
 from File f, string tag
 where none()
diff --git a/java/ql/src/semmle/code/java/security/DataFlow.qll b/java/ql/src/semmle/code/java/security/DataFlow.qll
