Update java/ql/src/change-notes/released/0.1.2.md

This commit is contained in:
Mathias Vorreiter Pedersen
2022-05-12 11:43:27 +01:00
committed by GitHub
parent 11707f8522
commit eb3a35eaea

View File

@@ -9,4 +9,4 @@
* Query `java/insecure-cookie` now tolerates setting a cookie's secure flag to `request.isSecure()`. This means servlets that intentionally accept unencrypted connections will no longer raise an alert.
* The query `java/non-https-urls` has been simplified
and no longer requires its sinks to be `MethodAccess`es.
* The logic to detect `WebView`s with JavaScript (and optionally file access) enabled in the query `java/android/unsafe-android-webview-fetch` has been improved.
* The logic to detect `WebView`s with JavaScript (and optionally file access) enabled in the query `java/android/unsafe-android-webview-fetch` has been improved.