hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-05 05:35:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Release preparation for version 2.23.0

Browse Source
This commit is contained in:
github-actions[bot]
2025-09-02 11:09:32 +00:00
parent 7ae5d405fc
commit 0bfa93828b
185 changed files with 473 additions and 184 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
javascript/ql/lib/change-notes/2025-07-15-xml-bomb-sinks.md → javascript/ql/lib/change-notes/released/2.6.10.md
View File

@@ -1,4 +1,5 @@
---
category: minorAnalysis
---
## 2.6.10
### Minor Analysis Improvements
* Removed `libxmljs` as an XML bomb sink. The underlying libxml2 library now includes [entity reference loop detection](https://github.com/GNOME/libxml2/blob/0c948334a8f5c66d50e9f8992e62998017dc4fc6/NEWS#L905-L908) that prevents XML bomb attacks.