зеркало из https://github.com/github/codeql.git
393 B
393 B
lgtm,codescanning
- The data-flow library now recognises more side-effects of method chaining (e.g.
someObject.setX(clean).setY(tainted).setZ...
having a side-effect onsomeObject
), as well as other related circumstances where a function input is directly passed to its output. All queries that use data-flow analysis, including most security queries, may return more results accordingly.