change note

This commit is contained in:
Erik Krogh Kristensen
2020-05-04 09:49:20 +02:00
parent 659d40e08d
commit 9a7f8d97d2

View File

@@ -20,6 +20,7 @@
| Misspelled variable name (`js/misspelled-variable-name`) | Message changed | The message for this query now correctly identifies the misspelled variable in additional cases. |
| Uncontrolled data used in path expression (`js/path-injection`) | More results | This query now recognizes additional file system calls. |
| Uncontrolled command line (`js/command-line-injection`) | More results | This query now recognizes additional command execution calls. |
| Client-side URL redirect (`js/client-side-unvalidated-url-redirection`) | Less results | This query now recognizes additional safe patterns of doing URL redirects. |
## Changes to libraries