GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — codeql/javascript/change-notes/2021-03-01-ajv.md at main · ramdcoder/codeql

Expand file tree

/

2021-03-01-ajv.md

Copy path
More file actions
More file actions

Latest commit

 

History

History
History
8 lines (8 loc) · 598 Bytes
/

2021-03-01-ajv.md

Copy path

File metadata and controls

8 lines (8 loc) · 598 Bytes
Raw
Copy raw file
Download raw file
Edit and raw actions

lgtm,codescanning

  • The security queries now recognize the effect of JSON schema validation, and highlights cases where this validation is susceptible to denial-of-service attacks. Affects the package ajv.
  • A new query, js/resource-exhaustion-from-deep-object-traversal, has been added to the query suite, highlighting denial-of-service attacks exploiting operations that traverse deeply user-controlled objects.
  • The js/xss-through-exception query now recognizes JSON schema validation errors as a source, as they may contain part of the input data.
You are visitor 01402520 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.