Update javascript/ql/lib/change-notes/2025-05-30-url-package-taint-step.md

Co-authored-by: Asger F <asgerf@github.com>
This commit is contained in:
Napalys Klicius
2025-06-02 13:34:47 +02:00
committed by GitHub
parent 0b6a747737
commit c981c4fe30

View File

@@ -1,4 +1,4 @@
---
category: minorAnalysis
---
* Added taint flow through the `URL` constructor in request forgery detection, improving the identification of SSRF vulnerabilities.
* Added taint flow through the `URL` constructor from the `url` package, improving the identification of SSRF vulnerabilities.