hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-02 04:05:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #12887 from asgerf/js/unsafe-yaml-deserialization

Browse Source 
JS: Update model of js-yaml
This commit is contained in:
Asger F
2023-05-01 09:57:20 +02:00
committed by GitHub
parent 1bba5258d6 5f011a262c
commit e9f1e99526
7 changed files with 89 additions and 36 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
javascript/ql/src/change-notes/2023-04-26-unsafe-yaml-deserialization.md Normal file
View File

@@ -0,0 +1,5 @@
---
category: minorAnalysis
---
* The `js/unsafe-deserialization` query no longer flags deserialization through the `js-yaml` library, except
when it is used with an unsafe schema.