mirror of
https://github.com/github/codeql.git
synced 2026-04-24 16:25:15 +02:00
Merge pull request #15769 from github/coadaflorin/changelog-2.16.3-updates
Match changelog updates with public unified changelog
This commit is contained in:
@@ -15,7 +15,7 @@
|
||||
### Minor Analysis Improvements
|
||||
|
||||
* The sanitizer for the path injection queries has been improved to handle more cases where `equals` is used to check an exact path match.
|
||||
* The query `java/unvalidated-url-redirection` now sanitizes results following the same logic as the query `java/ssrf`. URLs the destination of which cannot be externally controlled will not be reported anymore.
|
||||
* The query `java/unvalidated-url-redirection` now sanitizes results following the same logic as the query `java/ssrf`. URLs where the destination cannot be controlled externally are no longer reported.
|
||||
|
||||
## 0.8.8
|
||||
|
||||
|
||||
@@ -15,4 +15,4 @@
|
||||
### Minor Analysis Improvements
|
||||
|
||||
* The sanitizer for the path injection queries has been improved to handle more cases where `equals` is used to check an exact path match.
|
||||
* The query `java/unvalidated-url-redirection` now sanitizes results following the same logic as the query `java/ssrf`. URLs the destination of which cannot be externally controlled will not be reported anymore.
|
||||
* The query `java/unvalidated-url-redirection` now sanitizes results following the same logic as the query `java/ssrf`. URLs where the destination cannot be controlled externally are no longer reported.
|
||||
|
||||
Reference in New Issue
Block a user