mirror of
https://github.com/github/codeql.git
synced 2026-01-27 05:13:00 +01:00
500 B
500 B
0.0.7
Minor Analysis Improvements
- Support for handlebars templates has improved. Raw interpolation tags of the form
{{& ... }}are now recognized, as well as whitespace-trimming tags like{{~ ... }}. - Data flow is now tracked across middleware functions in more cases, leading to more security results in general. Affected packages are
expressandfastify. js/missing-token-validationhas been made more precise, yielding both fewer false positives and more true positives.