mirror of
https://github.com/github/codeql.git
synced 2026-02-20 00:43:44 +01:00
437 B
437 B
0.8.4
Minor Analysis Improvements
- Improved Reflected server-side cross-site scripting (
py/reflective-xss) query to not alert on data passed toflask.jsonify. Since these HTTP responses are returned with mime-typeapplication/json, they do not pose a security risk for XSS. - Updated path explanations for
@kind path-problemqueries to always include left hand side of assignments, making paths easier to understand.