JS: Add change note

This commit is contained in:
Asger F
2019-10-25 13:09:39 +01:00
parent 7ed31baeea
commit 4e3f6c5107

View File

@@ -38,6 +38,7 @@
| Reflected cross-site scripting (`js/reflected-xss`) | Fewer false-positive results | The query now recognizes more sanitizers. |
| Stored cross-site scripting (`js/stored-xss`) | Fewer false-positive results | The query now recognizes more sanitizers. |
| Uncontrolled command line (`js/command-line-injection`) | More results | This query now treats responses from servers as untrusted. |
| Uncontrolled data used in path expression (`js/path-injection`) | Fewer false-positive results | This query now recognizes calls to Express `sendFile` as safe in some cases. |
## Changes to QL libraries