mirror of
https://github.com/github/codeql.git
synced 2026-01-07 11:40:27 +01:00
Release preparation for version 2.13.0
This commit is contained in:
14
javascript/ql/src/change-notes/released/0.6.0.md
Normal file
14
javascript/ql/src/change-notes/released/0.6.0.md
Normal file
@@ -0,0 +1,14 @@
|
||||
## 0.6.0
|
||||
|
||||
### Minor Analysis Improvements
|
||||
|
||||
* The `DisablingCertificateValidation.ql` query has been updated to check `createServer` from `https` for disabled certificate validation.
|
||||
* Improved the model of jQuery to account for XSS sinks where the HTML string
|
||||
is provided via a callback. This may lead to more results for the `js/xss` query.
|
||||
* The `js/weak-cryptographic-algorithm` query now flags cryptograhic operations using a weak block mode,
|
||||
such as AES-ECB.
|
||||
|
||||
### Bug Fixes
|
||||
|
||||
* Fixed a bug where a destructuring pattern could not be parsed if it had a property
|
||||
named `get` or `set` with a default value.
|
||||
Reference in New Issue
Block a user