mirror of
https://github.com/github/codeql.git
synced 2025-12-16 16:53:25 +01:00
Update CHANGELOG for query promotion and acknowledgment
Promote 'Permissive CORS configuration' query to default suite and acknowledge contributor.
This commit is contained in:
@@ -10,7 +10,7 @@
|
||||
* Data flow is now tracked through the `Promise.try` and `Array.prototype.with` functions.
|
||||
* Query `js/index-out-of-bounds` no longer produces a false-positive when a strictly-less-than check overrides a previous less-than-or-equal test.
|
||||
* The query `js/remote-property-injection` now detects property injection vulnerabilities through object enumeration patterns such as `Object.keys()`.
|
||||
* The query "Permissive CORS configuration" (`js/cors-permissive-configuration`) has been promoted from experimental and is now part of the default security suite.
|
||||
* The query "Permissive CORS configuration" (`js/cors-permissive-configuration`) has been promoted from experimental and is now part of the default security suite. Thank you to @maikypedia who [submitted the original experimental query](https://github.com/github/codeql/pull/14342)!
|
||||
|
||||
## 2.0.3
|
||||
|
||||
|
||||
Reference in New Issue
Block a user