Skip to content

Commit 0477bd7

Browse files
committed
C#: ZipSlip - Add change note.
1 parent fa78d04 commit 0477bd7

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

change-notes/1.18/analysis-csharp.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -15,6 +15,7 @@
1515

1616
| **Query** | **Tags** | **Purpose** |
1717
|-----------------------------|-----------|--------------------------------------------------------------------|
18+
| Arbitrary file write during zip extraction ("ZipSlip") | security external/cwe/cwe-022 | Identifies zip extraction routines which allow tainted path and arbitrary file overwrite vulnerabilities.
1819
| Constant condition (cs/constant-condition) | More results | The query has been generalized to cover both `Null-coalescing left operand is constant (cs/constant-null-coalescing)` and `Switch selector is constant (cs/constant-switch-selector)`. |
1920
| Exposing internal representation (cs/expose-implementation) | Different results | The query has been rewritten, based on the equivalent Java query. |
2021
| Local scope variable shadows member (cs/local-shadows-member) | maintainability, readability | Replaces the existing queries [Local variable shadows class member (cs/local-shadows-class-member)](https://help.semmle.com/wiki/display/CSHARP/Local+variable+shadows+class+member), [Local variable shadows struct member (cs/local-shadows-struct-member)](https://help.semmle.com/wiki/display/CSHARP/Local+variable+shadows+struct+member), [Parameter shadows class member (cs/parameter-shadows-class-member)](https://help.semmle.com/wiki/display/CSHARP/Parameter+shadows+class+member), and [Parameter shadows struct member (cs/parameter-shadows-struct-member)](https://help.semmle.com/wiki/display/CSHARP/Parameter+shadows+struct+member). |

0 commit comments

Comments
 (0)