Skip to content

Commit f064ba0

Browse files
author
Esben Sparre Andreasen
committed
JS: change notes for newline whitelist in js/incomplete-sanitization
1 parent ac0913c commit f064ba0

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

change-notes/1.21/analysis-javascript.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@
3030
| Double escaping or unescaping | More results | This rule now considers the flow of regular expressions literals. |
3131
| Expression has no effect | Fewer false-positive results | This rule now treats uses of `Object.defineProperty` more conservatively. |
3232
| Incomplete regular expression for hostnames | More results | This rule now tracks regular expressions for host names further. |
33-
| Incomplete string escaping or encoding | More results | This rule now considers the flow of regular expressions literals. |
33+
| Incomplete string escaping or encoding | More results | This rule now considers the flow of regular expressions literals, and it no longer flags the removal of trailing newlines. |
3434
| Password in configuration file | Fewer false positive results | This query now excludes passwords that are inserted into the configuration file using a templating mechanism. |
3535
| Replacement of a substring with itself | More results | This rule now considers the flow of regular expressions literals. |
3636
| Server-side URL redirect | Fewer false-positive results | This rule now treats URLs as safe in more cases where the hostname cannot be tampered with. |

0 commit comments

Comments
 (0)