Add change note

owen-mc · owen-mc · commit 44b6309e07e4 · 2024-07-30T15:44:00.000+01:00
diff --git a/java/ql/src/change-notes/2024-07-30-sensitive-log-whitelist-tokenizer.md b/java/ql/src/change-notes/2024-07-30-sensitive-log-whitelist-tokenizer.md
@@ -0,0 +1,4 @@
+---
+category: minorAnalysis
+---
+* Variables names containing the string "tokenizer" (case-insensitively) are no longer sources for the `java/sensitive-log` query. They normally relate to things like `java.util.StringTokenizer`, which are not sensitive information. This should fix some false positive alerts.

-Original file line number
+Diff line change
@@ @@ -0,0 +1,4 @@ @@
 +---
 +category: minorAnalysis
 +---
 +* Variables names containing the string "tokenizer" (case-insensitively) are no longer sources for the `java/sensitive-log` query. They normally relate to things like `java.util.StringTokenizer`, which are not sensitive information. This should fix some false positive alerts.