hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-19 10:23:15 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
z80coder/ATM-feature-optimisation
codeql/java/change-notes/2021-05-28-remove-senderror-xss-sink.md
Alvaro Muñoz f60df3b26a Update java/change-notes/2021-05-28-remove-senderror-xss-sink.md 
Co-authored-by: Chris Smowton <smowton@github.com>
2021-05-28 15:13:19 +02:00

295 B
Raw Permalink Blame History

lgtm,codescanning

  • The query "Cross-site scripting" (java/xss) has been improved to report fewer false positives by removing the javax.servlet.http.HttpServletResponse.sendError sink since Servlet API implementations generally already escape the error message, preventing script injection.