Skip to content

Latest commit

 

History

History
12 lines (8 loc) · 919 Bytes

4.0.0.md

File metadata and controls

12 lines (8 loc) · 919 Bytes

4.0.0

Breaking Changes

  • Deleted the deprecated describeBitSize predicate from IncorrectIntegerConversionLib.qll

Minor Analysis Improvements

  • Models-as-data models using "Parameter", "Parameter[n]" or "Parameter[n1..n2]" as the output now work correctly.
  • By implementing ImplicitFieldReadNode it is now possible to declare a dataflow node that reads any content (fields, array members, map keys and values). For example, this is appropriate for modelling a serialization method that flattens a potentially deep data structure into a string or byte array.
  • The Template.Execute[Template] methods of the text/template package now correctly convey taint from any nested fields to their result. This may produce more results from any taint-tracking query when the text/template package is in use.
  • Added the rs cors library to the CorsMisconfiguration.ql query