diff --git a/change-notes/1.25/analysis-go.md b/change-notes/1.25/analysis-go.md deleted file mode 100644 index 18c4a67dc40..00000000000 --- a/change-notes/1.25/analysis-go.md +++ /dev/null @@ -1,17 +0,0 @@ -# Improvements to Go analysis - -## General improvements - -* A model for the Macaron HTTP library's `Context.Redirect` function was added. - -## New queries - -| **Query** | **Tags** | **Purpose** | -|------------------------------------------------------------------------------|-----------------------------------------------------------------------------------------|-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| - -## Changes to existing queries - -| **Query** | **Expected impact** | **Change** | -|----------------------------------------------|-----------------------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------| -| Bad redirect check (`go/bad-redirect-check`) | More accurate results | The query now checks for a use of the value checked by the result in a redirect call, and no longer uses names as a heuristic for whether the checked value is a URL. | - diff --git a/change-notes/1.25/extractor-go.md b/change-notes/1.25/extractor-go.md deleted file mode 100644 index bb1067715a2..00000000000 --- a/change-notes/1.25/extractor-go.md +++ /dev/null @@ -1,5 +0,0 @@ -[[ condition: enterprise-only ]] - -# Improvements to Go analysis - -## Changes to code extraction diff --git a/change-notes/2020-05-01-bad-redirect-check.md b/change-notes/2020-05-01-bad-redirect-check.md new file mode 100644 index 00000000000..6ee5d0fb235 --- /dev/null +++ b/change-notes/2020-05-01-bad-redirect-check.md @@ -0,0 +1,2 @@ +lgtm,codescanning +* The query "Bad redirect check" (`go/bad-redirect-check`) now requires that the checked variable is actually used in a redirect as opposed to relying on a name-based heuristic. This eliminates some false positive results, and adds more true positive results. diff --git a/change-notes/2020-05-01-macaron-model.md b/change-notes/2020-05-01-macaron-model.md new file mode 100644 index 00000000000..056e7d093cc --- /dev/null +++ b/change-notes/2020-05-01-macaron-model.md @@ -0,0 +1,2 @@ +lgtm,codescanning +* Basic support for the [Macaron](https://go-macaron.com/) HTTP library has been added, which may lead to more results from the security queries. \ No newline at end of file