mirror of
https://github.com/github/codeql.git
synced 2026-05-01 03:35:13 +02:00
Merge pull request #10905 from jsoref/spelling-code-scanning-product
Spelling code scanning product
This commit is contained in:
@@ -2,5 +2,5 @@ lgtm,codescanning
|
||||
* The security queries now track taint through more query string parsers.
|
||||
Affected packages are
|
||||
[qs](https://npmjs.com/package/qs),
|
||||
[normailize-url](https://npmjs.com/package/normalize-url),
|
||||
[normalize-url](https://npmjs.com/package/normalize-url),
|
||||
[parseqs](https://npmjs.com/package/parseqs)
|
||||
@@ -134,7 +134,7 @@ No user-facing changes.
|
||||
The query is not run by default.
|
||||
* A new query `js/file-system-race` has been added. The query detects when there is time between a file being checked and used. The query is not run by default.
|
||||
* A new query `js/jwt-missing-verification` has been added. The query detects applications that don't verify JWT tokens.
|
||||
* The `js/insecure-dependency` query has been added. It detects depedencies that are downloaded using an unencrypted connection.
|
||||
* The `js/insecure-dependency` query has been added. It detects dependencies that are downloaded using an unencrypted connection.
|
||||
|
||||
## 0.0.9
|
||||
|
||||
|
||||
@@ -6,4 +6,4 @@
|
||||
The query is not run by default.
|
||||
* A new query `js/file-system-race` has been added. The query detects when there is time between a file being checked and used. The query is not run by default.
|
||||
* A new query `js/jwt-missing-verification` has been added. The query detects applications that don't verify JWT tokens.
|
||||
* The `js/insecure-dependency` query has been added. It detects depedencies that are downloaded using an unencrypted connection.
|
||||
* The `js/insecure-dependency` query has been added. It detects dependencies that are downloaded using an unencrypted connection.
|
||||
|
||||
Reference in New Issue
Block a user