mirror of
https://github.com/github/codeql.git
synced 2026-07-21 03:08:25 +02:00
1.8 KiB
1.8 KiB
Improvements to JavaScript analysis
General improvements
- Support for the following frameworks and libraries has been improved:
New queries
| Query | Tags | Purpose |
|---|
Changes to existing queries
| Query | Expected impact | Change |
|---|---|---|
Clear-text logging of sensitive information (js/clear-text-logging) |
More results | More results involving process.env and indirect calls to logging methods are recognized. |
Incomplete string escaping or encoding (js/incomplete-sanitization) |
Fewer false positive results | This query now recognizes additional cases where a single replacement is likely to be intentional. |
Unbound event handler receiver (js/unbound-event-handler-receiver) |
Fewer false positive results | This query now recognizes additional ways event handler receivers can be bound. |