JS: Change note

This commit is contained in:
Asger Feldthaus
2021-11-08 11:40:36 +01:00
parent 635ac0a209
commit 5559681916

View File

@@ -0,0 +1,3 @@
lgtm,codescanning
* Data flow is now tracked across middleware functions in more cases, leading to more security results in general. Affected packages are `express` and `fastify`.
* `js/missing-token-validation` has been made more precise, yielding both fewer false positives and more true positives.