From 523f1068b822571871a479943a8bf72fb3e529bc Mon Sep 17 00:00:00 2001 From: Felicity Chapman Date: Wed, 22 Apr 2020 15:48:01 +0100 Subject: [PATCH] Editorial suggestions We don't hyphenate "QL-library" and there were a few typos. Feel free to further revise this if I've changed the meaning too much. As discussed separately, I was unable to raise this as a PR in GitHub.com and had to resort to a direct commit. (cherry picked from commit e29468135d9cd70fd0d5bda195fbcba2c4c81a5a) --- change-notes/1.24/analysis-python.md | 25 ++++++++++++------------- 1 file changed, 12 insertions(+), 13 deletions(-) diff --git a/change-notes/1.24/analysis-python.md b/change-notes/1.24/analysis-python.md index d52b650ff1c..16a3d4156e4 100644 --- a/change-notes/1.24/analysis-python.md +++ b/change-notes/1.24/analysis-python.md @@ -32,23 +32,22 @@ The following changes in version 1.24 affect Python analysis in all applications ### Web framework support -The QL-library support for the web frameworks Bottle, CherryPy, Falcon, Pyramid, TurboGears, Tornado, and Twisted have -been fixed so they provide a proper HttpRequestTaintSource, instead of a TaintSource. This will enable results for the following queries: +The CodeQL library has improved support for the web frameworks: Bottle, CherryPy, Falcon, Pyramid, TurboGears, Tornado, and Twisted. They now provide a proper `HttpRequestTaintSource`, instead of a `TaintSource`. This will enable results for the following queries: -- py/path-injection -- py/command-line-injection -- py/reflective-xss -- py/sql-injection -- py/code-injection -- py/unsafe-deserialization -- py/url-redirection +- `py/path-injection` +- `py/command-line-injection` +- `py/reflective-xss` +- `py/sql-injection` +- `py/code-injection` +- `py/unsafe-deserialization` +- `py/url-redirection` -The QL-library support for the web framework Twisted have been fixed so they provide a proper -HttpResponseTaintSink, instead of a TaintSink. This will enable results for the following +The library also has improved support for the web framework Twisted. It now provides a proper +`HttpResponseTaintSink`, instead of a `TaintSink`. This will enable results for the following queries: -- py/reflective-xss -- py/stack-trace-exposure +- `py/reflective-xss` +- `py/stack-trace-exposure` ## Changes to libraries ### Taint tracking