codeql/java/ql/lib/change-notes/released/1.1.2.md

1.1.2

Minor Analysis Improvements

• Added models for the following packages:

  • io.undertow.server.handlers.resource
  • jakarta.faces.context
  • javax.faces.context
  • javax.servlet
  • org.jboss.vfs
  • org.springframework.core.io

• A bug has been fixed in the heuristic identification of uncertain control flow, which is used to filter data flow in order to improve performance and reduce false positives. This fix means that slightly more code is identified and hence pruned from data flow.

• Excluded reverse DNS from the loopback address as a source of untrusted data.

Bug Fixes

• Support for codeql test run for Kotlin sources has been fixed.