mirror of
https://github.com/github/codeql.git
synced 2025-12-20 10:46:30 +01:00
3 lines
295 B
Markdown
3 lines
295 B
Markdown
lgtm,codescanning
|
|
* The query "Cross-site scripting" (`java/xss`) has been improved to report fewer false positives by removing the `javax.servlet.http.HttpServletResponse.sendError` sink since Servlet API implementations generally already escape the error message, preventing script injection.
|