hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-17 09:13:20 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
codeql-cli-2.23.2
codeql/javascript/ql/lib/change-notes/released/2.5.0.md
Chuan-kai Lin 17acb31f65 JS: Fix changelog formatting
2025-03-03 09:19:01 -08:00

651 B
Raw Permalink Blame History

2.5.0

Major Analysis Improvements

  • Added support for the response threat model kind, which can enabled with advanced setup. When enabled, the response data coming back from an outgoing HTTP request is considered a source of taint.
  • Added support for the useQuery hook from @tanstack/react-query.

Minor Analysis Improvements

  • The response.download() function in express is now recognized as a sink for path traversal attacks.