Add change note

This commit is contained in:
Owen Mansel-Chan
2024-03-23 23:51:52 +00:00
parent f4b3bae88b
commit 821f399193

View File

@@ -0,0 +1,4 @@
---
category: minorAnalysis
---
* Variables named `tokenImage` are no longer sources for the `java/sensitive-log` query. This is because this variable name is used in parsing code generated by JavaCC, so it causes a larger number of false positive alerts.