Files
codeql/javascript/ql/lib/change-notes/released/2.7.0.md
2026-05-05 09:34:30 +00:00

661 B

2.7.0

New Features

  • Added support for @vercel/node Vercel serverless functions. Handlers are recognized via the VercelRequest/VercelResponse TypeScript parameter types, and standard security queries (js/reflected-xss, js/request-forgery, js/sql-injection, js/command-line-injection, etc.) now detect vulnerabilities in Vercel API route files.
  • Data flow barriers and barrier guards can now be added using data extensions. For more information see Customizing library models for JavaScript.