Skip to content

1.7.0.md

Latest commit

 

History

History
10 lines (6 loc) · 673 Bytes

1.7.0.md

File metadata and controls

10 lines (6 loc) · 673 Bytes

1.7.0

Query Metadata Changes

  • The @security-severity metadata of cs/log-forging has been reduced from 7.8 (high) to 6.1 (medium).
  • The @security-severity metadata of cs/web/xss has been increased from 6.1 (medium) to 7.8 (high).

Major Analysis Improvements

  • The cs/constant-condition query has been simplified. The query no longer reports trivially constant conditions as they were found to generally be intentional. As a result, it should now produce fewer false positives. Additionally, the simplification means that it now reports all the results that cs/constant-comparison used to report, and as consequence, that query has been deleted.