From 42ecc9b1c79bd2aa919478a521d41340aa080db7 Mon Sep 17 00:00:00 2001 From: Dave Bartolomeo Date: Tue, 14 Dec 2021 12:46:19 -0500 Subject: [PATCH] Move new change notes to appropriate pack --- .../2021-11-02-incorrect-integer-conversion-updated.md | 4 ---- change-notes/2021-11-19-log-injection-query.md | 2 -- ql/src/change-notes/2021-11-19-log-injection-query.md | 5 +++++ 3 files changed, 5 insertions(+), 6 deletions(-) delete mode 100644 change-notes/2021-11-02-incorrect-integer-conversion-updated.md delete mode 100644 change-notes/2021-11-19-log-injection-query.md create mode 100644 ql/src/change-notes/2021-11-19-log-injection-query.md diff --git a/change-notes/2021-11-02-incorrect-integer-conversion-updated.md b/change-notes/2021-11-02-incorrect-integer-conversion-updated.md deleted file mode 100644 index 3075f44118f..00000000000 --- a/change-notes/2021-11-02-incorrect-integer-conversion-updated.md +++ /dev/null @@ -1,4 +0,0 @@ -lgtm,codescanning -* The query "Incorrect conversion between integer types" has been improved to - treat `math.MaxUint` and `math.MaxInt` as the values they would be on a - 32-bit architecture. This should lead to fewer false positive results. diff --git a/change-notes/2021-11-19-log-injection-query.md b/change-notes/2021-11-19-log-injection-query.md deleted file mode 100644 index 8ac6a4d4440..00000000000 --- a/change-notes/2021-11-19-log-injection-query.md +++ /dev/null @@ -1,2 +0,0 @@ -lgtm,codescanning -* A new query "Log entries created from user input" (`go/log-injection`) has been added. The query reports user-provided data reaching calls to logging methods. diff --git a/ql/src/change-notes/2021-11-19-log-injection-query.md b/ql/src/change-notes/2021-11-19-log-injection-query.md new file mode 100644 index 00000000000..8f12b920dc2 --- /dev/null +++ b/ql/src/change-notes/2021-11-19-log-injection-query.md @@ -0,0 +1,5 @@ +--- +category: newQuery +tags: [lgtm,codescanning] +--- +* A new query _Log entries created from user input_ (`go/log-injection`) has been added. The query reports user-provided data reaching calls to logging methods.