Files
codeql/java/ql/lib/change-notes/released/9.2.2.md
2026-07-23 15:25:22 +00:00

7 lines
428 B
Markdown

## 9.2.2
### Minor Analysis Improvements
* Kotlin versions up to 2.4.10 are now supported.
* `java.io.File.getName()` is no longer treated as a complete sanitizer for `java/path-injection`, since it does not remove a `..` path component (for example `new File("..").getName()` returns `".."`). It is now only recognized as a sanitizer when combined with a subsequent check for `..` components, which may result in new alerts.