hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-03 04:39:29 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge branch 'master' into pseudo-random-bytes

Browse Source
This commit is contained in:
Max Schaefer
2018-12-12 08:19:57 +00:00
committed by GitHub
parent a01a9dc5cc 06dd5f3616
commit 4fc27aaa51
22 changed files with 92 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
change-notes/1.20/analysis-javascript.md
View File

@@ -21,6 +21,7 @@
|--------------------------------------------|------------------------------|------------------------------------------------------------------------------|
| Client-side cross-site scripting | More results | This rule now recognizes WinJS functions that are vulnerable to HTML injection. |
| Insecure randomness | More results | This rule now flags insecure uses of `crypto.pseudoRandomBytes`. |
| Unused variable, import, function or class | Fewer false-positive results | This rule now flags fewer variables that are implictly used by JSX elements. |
| Unused parameter | Fewer false-positive results | This rule no longer flags parameters with leading underscore. |
| Unused variable, import, function or class | Fewer false-positive results | This rule now flags fewer variables that are implictly used by JSX elements, and no longer flags variables with leading underscore. |
## Changes to QL libraries