Add change note

This commit is contained in:
Owen Mansel-Chan
2026-02-12 16:24:30 +00:00
parent bfe26c1989
commit c539c2f4fd

View File

@@ -0,0 +1,4 @@
---
category: minorAnalysis
---
* More ways of checking that a string matches a regular expression are now considered as sanitizers for various queries, including `java/ssrf` and `java/path-injection`. In particular, being annotated with `@javax.validation.constraints.Pattern` is now recognised as a sanitizer for those queries.