Files
codeql/csharp/ql/src/change-notes/released/1.6.2.md
2026-02-16 13:29:25 +00:00

316 B

1.6.2

Bug Fixes

  • The cs/web/missing-token-validation ("Missing cross-site request forgery token validation") query now recognizes antiforgery attributes on base controller classes, fixing false positives when [ValidateAntiForgeryToken] or [AutoValidateAntiforgeryToken] is applied to a parent class.