Update ruby/ql/lib/change-notes/released/0.3.2.md

This commit is contained in:
Jeroen Ketema
2022-07-28 15:45:01 +02:00
committed by GitHub
parent 3137addfc1
commit 15a979cfc6

View File

@@ -3,4 +3,4 @@
### Minor Analysis Improvements
* Calls to `Arel.sql` are now recognised as propagating taint from their argument.
- Calls to `ActiveRecord::Relation#annotate` are now recognized as`SqlExecution`s so that it will be considered as a sink for queries like rb/sql-injection.
* Calls to `ActiveRecord::Relation#annotate` are now recognized as `SqlExecution`s so that it will be considered as a sink for queries like rb/sql-injection.