mirror of
https://github.com/github/codeql.git
synced 2025-12-17 09:13:20 +01:00
14 lines
915 B
Markdown
14 lines
915 B
Markdown
## 2.6.1
|
|
|
|
### Minor Analysis Improvements
|
|
|
|
* Data passed to the [NextResponse](https://nextjs.org/docs/app/api-reference/functions/next-response) constructor is now treated as a sink for `js/reflected-xss`.
|
|
* Data received from [NextRequest](https://nextjs.org/docs/app/api-reference/functions/next-request) and [Request](https://developer.mozilla.org/en-US/docs/Web/API/Request) is now treated as a remote user input `source`.
|
|
* Added support for the `make-dir` package.
|
|
* Added support for the `open` package.
|
|
* Added taint propagation for `Uint8Array`, `ArrayBuffer`, `SharedArrayBuffer` and `TextDecoder.decode()`.
|
|
* Improved detection of `WebSocket` and `SockJS` usage.
|
|
* Added data received from `WebSocket` clients as a remote flow source.
|
|
* Added support for additional `mkdirp` methods as sinks in path-injection queries.
|
|
* Added support for additional `rimraf` methods as sinks in path-injection queries.
|