Change note

This commit is contained in:
Ed Minnix
2024-01-10 21:13:51 -05:00
parent 3311b3be8e
commit 32fe8e02fb

View File

@@ -0,0 +1,5 @@
---
category: minorAnalysis
---
* Added a new library `semmle.code.java.security.dataflow.CommonSanitizers` which contains a new sanitizer class `SimpleScalarSanitizer`, which represents nodes which cannot realistically carry taint for most queries (e.g. primitives, their boxed equivalents, and numeric types).
* Converted definitions of `isBarrier` and sanitizer classes to use `SimpleScalarSanitizer` instead of checking if `node.getType()` is `PrimitiveType` or `BoxedType`.