Files
codeql/go/ql/lib/change-notes/released/4.3.4.md
2025-09-16 14:14:42 +00:00

349 B

4.3.4

Minor Analysis Improvements

  • The second argument of the CreateTemp function, from the os package, is no longer a path-injection sink due to proper sanitization by Go.
  • The query "Uncontrolled data used in path expression" (go/path-injection) now detects sanitizing a path by adding os.PathSeparator or \ to the beginning.