mirror of
https://github.com/github/codeql.git
synced 2025-12-22 19:56:32 +01:00
Release preparation for version 2.8.1
This commit is contained in:
9
javascript/ql/src/change-notes/released/0.0.10.md
Normal file
9
javascript/ql/src/change-notes/released/0.0.10.md
Normal file
@@ -0,0 +1,9 @@
|
||||
## 0.0.10
|
||||
|
||||
### New Queries
|
||||
|
||||
* A new query, `js/unsafe-code-construction`, has been added to the query suite, highlighting libraries that may leave clients vulnerable to arbitary code execution.
|
||||
The query is not run by default.
|
||||
* A new query `js/file-system-race` has been added. The query detects when there is time between a file being checked and used. The query is not run by default.
|
||||
* A new query `js/jwt-missing-verification` has been added. The query detects applications that don't verify JWT tokens.
|
||||
* The `js/insecure-dependency` query has been added. It detects depedencies that are downloaded using an unencrypted connection.
|
||||
Reference in New Issue
Block a user