mirror of
https://github.com/github/codeql.git
synced 2026-01-29 06:12:58 +01:00
Add change notes for PRs that omitted them
This commit is contained in:
2
change-notes/2020-08-27-protobufs.md
Normal file
2
change-notes/2020-08-27-protobufs.md
Normal file
@@ -0,0 +1,2 @@
|
||||
lgtm,codescanning
|
||||
* Taint is now propagated across protocol buffer ("protobuf") marshalling and unmarshalling operations. This may result in more results from existing queries where the protocol buffer format is used.
|
||||
2
change-notes/2020-09-14-split-string-sanitizer.md
Normal file
2
change-notes/2020-09-14-split-string-sanitizer.md
Normal file
@@ -0,0 +1,2 @@
|
||||
lgtm,codescanning
|
||||
* Splitting a string by whitespace or a colon is now considered sanitizing by the `go/clear-text-logging` query, because this is frequently used to split a username and password or other secret.
|
||||
Reference in New Issue
Block a user