We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 2d26405 commit 467256dCopy full SHA for 467256d
1 file changed
javascript/ql/src/change-notes/2024-08-16-post-message-source-client-side.md
@@ -0,0 +1,6 @@
1
+---
2
+category: minorAnalysis
3
4
+* Message events in the browser are now properly classified as client-side taint sources. Previously they were
5
+ incorrectly classified as server-side taint sources, which resulted in some alerts being reported by
6
+ the wrong query, such as server-side URL redirection instead of client-side URL redirection.
0 commit comments