mirror of
https://github.com/github/codeql.git
synced 2026-01-05 18:50:23 +01:00
473 B
473 B
1.1.0
Major Analysis Improvements
- The query
java/weak-cryptographic-algorithmno longer alerts aboutRSA/ECBalgorithm strings.
Minor Analysis Improvements
- The query
java/tainted-permissions-checknow uses threat models. This means thatlocalsources are no longer included by default for this query, but can be added by enabling thelocalthreat model. - Added more
org.apache.commons.io.FileUtils-related sinks to the path injection query.