mirror of
https://github.com/github/codeql.git
synced 2026-08-03 17:03:02 +02:00
7 lines
349 B
Markdown
7 lines
349 B
Markdown
## 4.3.4
|
|
|
|
### Minor Analysis Improvements
|
|
|
|
* The second argument of the `CreateTemp` function, from the `os` package, is no longer a path-injection sink due to proper sanitization by Go.
|
|
* The query "Uncontrolled data used in path expression" (`go/path-injection`) now detects sanitizing a path by adding `os.PathSeparator` or `\` to the beginning.
|