Merge pull request #3497 from esbena/js/yield-and-local-objects

Approved by asgerf, erik-krogh
This commit is contained in:
semmle-qlci
2020-05-19 09:02:22 +01:00
committed by GitHub
4 changed files with 14 additions and 0 deletions

View File

@@ -41,6 +41,7 @@
| Unknown directive (`js/unknown-directive`) | Less results | This query no longer flags directives generated by the Babel compiler. |
| Code injection (`js/code-injection`) | More results | More potential vulnerabilities involving NoSQL code operators are now recognized. |
| Zip Slip (`js/zipslip`) | More results | This query now recognizes additional vulnerabilities. |
| Unused property (`js/unused-property`) | Less results | This query no longer flags properties of objects that are operands of `yield` expressions. |
## Changes to libraries