Commit 013b7ef
Apply suggestions from code review
Co-authored-by: Jeroen Ketema <93738568+jketema@users.noreply.github.com>1 parent 5083272 commit 013b7ef
4 files changed
Lines changed: 6 additions & 6 deletions
File tree
- javascript/ql/src
- change-notes/released
- ruby/ql/lib
- change-notes/released
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -9,7 +9,7 @@ | |||
| 9 | 9 | ||
| 10 | 10 | ### Minor Analysis Improvements | |
| 11 | 11 | ||
| 12 | - - Added sources for user defined path and query parameters in `Next.js`. | ||
| 12 | + * Added sources for user defined path and query parameters in `Next.js`. | ||
| 13 | 13 | * The alert message of many queries have been changed to better follow the style guide and make the message consistent with other languages. | |
| 14 | 14 | ||
| 15 | 15 | ## 0.4.2 | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -9,5 +9,5 @@ | |||
| 9 | 9 | ||
| 10 | 10 | ### Minor Analysis Improvements | |
| 11 | 11 | ||
| 12 | - - Added sources for user defined path and query parameters in `Next.js`. | ||
| 12 | + * Added sources for user defined path and query parameters in `Next.js`. | ||
| 13 | 13 | * The alert message of many queries have been changed to better follow the style guide and make the message consistent with other languages. | |
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -2,8 +2,8 @@ | |||
| 2 | 2 | ||
| 3 | 3 | ### Minor Analysis Improvements | |
| 4 | 4 | ||
| 5 | - * There was a bug in `TaintTracking::localTaint` and `TaintTracking::localTaintStep` such that they only tracked non-value-preserving flow steps. They have been fixed and now also include value-preserving steps. | ||
| 6 | - - Instantiations using `Faraday::Connection.new` are now recognized as part of `FaradayHttpRequest`s, meaning they will be considered as sinks for queries such as `rb/request-forgery`. | ||
| 5 | + * There was a bug in `TaintTracking::localTaint` and `TaintTracking::localTaintStep` such that they only tracked non-value-preserving flow steps. They have been fixed and now also include value-preserving steps. | ||
| 6 | + * Instantiations using `Faraday::Connection.new` are now recognized as part of `FaradayHttpRequest`s, meaning they will be considered as sinks for queries such as `rb/request-forgery`. | ||
| 7 | 7 | * Taint flow is now tracked through extension methods on `Hash`, `String` and | |
| 8 | 8 | `Object` provided by `ActiveSupport`. | |
| 9 | 9 | ||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
@@ -2,7 +2,7 @@ | |||
| 2 | 2 | ||
| 3 | 3 | ### Minor Analysis Improvements | |
| 4 | 4 | ||
| 5 | - * There was a bug in `TaintTracking::localTaint` and `TaintTracking::localTaintStep` such that they only tracked non-value-preserving flow steps. They have been fixed and now also include value-preserving steps. | ||
| 6 | - - Instantiations using `Faraday::Connection.new` are now recognized as part of `FaradayHttpRequest`s, meaning they will be considered as sinks for queries such as `rb/request-forgery`. | ||
| 5 | + * There was a bug in `TaintTracking::localTaint` and `TaintTracking::localTaintStep` such that they only tracked non-value-preserving flow steps. They have been fixed and now also include value-preserving steps. | ||
| 6 | + * Instantiations using `Faraday::Connection.new` are now recognized as part of `FaradayHttpRequest`s, meaning they will be considered as sinks for queries such as `rb/request-forgery`. | ||
| 7 | 7 | * Taint flow is now tracked through extension methods on `Hash`, `String` and | |
| 8 | 8 | `Object` provided by `ActiveSupport`. | |
0 commit comments