mirror of
https://github.com/github/codeql.git
synced 2025-12-19 10:23:15 +01:00
3 lines
312 B
Markdown
3 lines
312 B
Markdown
lgtm,codescanning
|
|
* The query "Resolving XML external entity in user-controlled data" (`java/xxe`) has been improved to report fewer false positives when a Builder / Factory (e.g. an `XMLInputFactory`) is configured safely by using a boxed boolean as second argument to one or more of its configuration methods.
|