codeql/go/ql/lib/change-notes/released/4.0.0.md

4.0.0

Breaking Changes

• Deleted the deprecated describeBitSize predicate from IncorrectIntegerConversionLib.qll

Minor Analysis Improvements

• Models-as-data models using "Parameter", "Parameter[n]" or "Parameter[n1..n2]" as the output now work correctly.
• By implementing ImplicitFieldReadNode it is now possible to declare a dataflow node that reads any content (fields, array members, map keys and values). For example, this is appropriate for modelling a serialization method that flattens a potentially deep data structure into a string or byte array.
• The Template.Execute[Template] methods of the text/template package now correctly convey taint from any nested fields to their result. This may produce more results from any taint-tracking query when the text/template package is in use.
• Added the rs cors library to the CorsMisconfiguration.ql query