hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-18 01:33:15 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
e58b90ef1c670308976b6e901b202a4c4ab665a3
codeql/java/change-notes/2021-08-03-spring-content-types.md
Chris Smowton 9d31641bb1 Add change note
2021-09-10 16:10:56 +01:00

297 B
Raw Blame History

lgtm,codescanning

  • The XSS query now accounts for more ways to set the content-type of an entity served via a Spring HTTP endpoint. This may flag more cases where an XSS-vulnerable content-type is set, and exclude more cases where a non-vulnerable content-type such as application/json is set.