mirror of
https://github.com/github/codeql.git
synced 2026-04-28 18:25:24 +02:00
add change notes
This commit is contained in:
@@ -0,0 +1,3 @@
|
||||
lgtm,codescanning
|
||||
* The "Deserialization of user-controlled data" (`java/unsafe-deserialization`) query
|
||||
now recognizes `JYaml`, `JsonIO`, `YAMLBeans`, `HessianBurlap`, `Castor`, `Burlap` deserialization.
|
||||
Reference in New Issue
Block a user