Update change note

This commit is contained in:
Ed Minnix
2024-01-22 23:57:31 -05:00
parent fb80c5ea84
commit fcbee1994b

View File

@@ -1,5 +1,5 @@
---
category: feature
---
* Added a new library `semmle.code.java.security.dataflow.CommonSanitizers` which contains a new sanitizer class `SimpleScalarSanitizer`, which represents nodes which cannot realistically carry taint for most queries (e.g. primitives, their boxed equivalents, and numeric types).
* Converted definitions of `isBarrier` and sanitizer classes to use `SimpleScalarSanitizer` instead of checking if `node.getType()` is `PrimitiveType` or `BoxedType`.
* Added a new library `semmle.code.java.security.Sanitizers` which contains a new sanitizer class `SimpleTypeSanitizer`, which represents nodes which cannot realistically carry taint for most queries (e.g. primitives, their boxed equivalents, and numeric types).
* Converted definitions of `isBarrier` and sanitizer classes to use `SimpleTypeSanitizer` instead of checking if `node.getType()` is `PrimitiveType` or `BoxedType`.