Edit change note

This commit is contained in:
Maiky
2023-05-11 15:40:36 +02:00
committed by GitHub
parent 071a77cedc
commit 0227b94ab5

View File

@@ -1,4 +1,4 @@
---
category: newQuery
---
* Added a new experimental query, `rb/xpath-injection`, to detect cases where user input may be embedded into a template's code in an unsafe manner.
* Added a new experimental query, `rb/xpath-injection`, to detect cases where XPath statements are constructed from user input in an unsafe manner.