From e241f8469b6c67ea11d314b7f87dc6f12eac62d6 Mon Sep 17 00:00:00 2001 From: Chris Smowton Date: Fri, 20 Nov 2020 16:15:12 +0000 Subject: [PATCH] Add change notes for PRs that omitted them --- change-notes/2020-08-27-protobufs.md | 2 ++ change-notes/2020-09-14-split-string-sanitizer.md | 2 ++ 2 files changed, 4 insertions(+) create mode 100644 change-notes/2020-08-27-protobufs.md create mode 100644 change-notes/2020-09-14-split-string-sanitizer.md diff --git a/change-notes/2020-08-27-protobufs.md b/change-notes/2020-08-27-protobufs.md new file mode 100644 index 00000000000..2628fd12d91 --- /dev/null +++ b/change-notes/2020-08-27-protobufs.md @@ -0,0 +1,2 @@ +lgtm,codescanning +* Taint is now propagated across protocol buffer ("protobuf") marshalling and unmarshalling operations. This may result in more results from existing queries where the protocol buffer format is used. diff --git a/change-notes/2020-09-14-split-string-sanitizer.md b/change-notes/2020-09-14-split-string-sanitizer.md new file mode 100644 index 00000000000..970da425e87 --- /dev/null +++ b/change-notes/2020-09-14-split-string-sanitizer.md @@ -0,0 +1,2 @@ +lgtm,codescanning +* Splitting a string by whitespace or a colon is now considered sanitizing by the `go/clear-text-logging` query, because this is frequently used to split a username and password or other secret.