Files
codeql/python/ql/src/change-notes/released/0.9.0.md
2023-10-04 14:15:27 +00:00

453 B

0.9.0

New Queries

  • The query py/nosql-injection for finding NoSQL injection vulnerabilities is now available in the default security suite.

Minor Analysis Improvements

  • Improved URL redirection from remote source (py/url-redirection) query to not alert when URL has been checked with django.utils.http. url_has_allowed_host_and_scheme.
  • Extended the py/command-line-injection query with sinks from Python's asyncio module.