Files
codeql/java/ql/lib/change-notes/released/9.2.2.md
2026-07-23 15:25:22 +00:00

428 B

9.2.2

Minor Analysis Improvements

  • Kotlin versions up to 2.4.10 are now supported.
  • java.io.File.getName() is no longer treated as a complete sanitizer for java/path-injection, since it does not remove a .. path component (for example new File("..").getName() returns ".."). It is now only recognized as a sanitizer when combined with a subsequent check for .. components, which may result in new alerts.