hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-28 10:15:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update javascript/ql/lib/change-notes/2025-02-12-express-download.md

Browse Source 
Co-authored-by: Asger F <asgerf@github.com>
This commit is contained in:
Kevin Stubbings
2025-02-12 11:01:29 -08:00
committed by GitHub
parent f5521ca1b8
commit 253882c3d1
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
javascript/ql/lib/change-notes/2025-02-12-express-download.md
View File

@@ -1,4 +1,4 @@
---
category: minorAnalysis
---
* Added result.download() function to ResponseDownloadAsFileSystemAccess to FileSystemReadAccess
* The `response.download()` function in `express` is now recognized as a sink for path traversal attacks.