Update java/ql/src/CHANGELOG.md

This commit is contained in:
Mathias Vorreiter Pedersen
2022-05-12 11:43:08 +01:00
committed by GitHub
parent 22bdde6eaa
commit 2ef976a152

View File

@@ -9,7 +9,7 @@
* Query `java/insecure-cookie` now tolerates setting a cookie's secure flag to `request.isSecure()`. This means servlets that intentionally accept unencrypted connections will no longer raise an alert.
* The query `java/non-https-urls` has been simplified
and no longer requires its sinks to be `MethodAccess`es.
* The logic to detect `WebView`s with JavaScript (and optionally file access) enabled in the query `java/android/unsafe-android-webview-fetch` has been improved.
* The logic to detect `WebView`s with JavaScript (and optionally file access) enabled in the query `java/android/unsafe-android-webview-fetch` has been improved.
## 0.1.1