hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-21 23:14:03 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
51243454c890c3c58c0d9ba767dfec8a030ba2ed
codeql/java/change-notes/2021-05-28-remove-senderror-xss-sink.md
Alvaro Muñoz f60df3b26a Update java/change-notes/2021-05-28-remove-senderror-xss-sink.md 
Co-authored-by: Chris Smowton <smowton@github.com>
2021-05-28 15:13:19 +02:00

295 B
Raw Blame History

lgtm,codescanning

  • The query "Cross-site scripting" (java/xss) has been improved to report fewer false positives by removing the javax.servlet.http.HttpServletResponse.sendError sink since Servlet API implementations generally already escape the error message, preventing script injection.