Change note

This commit is contained in:
Ed Minnix
2024-03-01 12:56:56 -05:00
parent d300736c7e
commit 8187b00562

View File

@@ -0,0 +1,5 @@
---
category: minorAnalysis
---
* Data flow queries that track flow from *local* flow sources now use the current *threat model* configuration instead. This may lead to changes in the produced alerts if the threat model configuration only uses *remote* flow sources. The changed queries are `cs/code-injection`, `cs/resource-injection`, `cs/sql-injection`, and `cs/uncontrolled-format-string`.