- The
DisablingCertificateValidation.qlquery has been updated to checkcreateServerfromhttpsfor disabled certificate validation. - Improved the model of jQuery to account for XSS sinks where the HTML string
is provided via a callback. This may lead to more results for the
js/xssquery. - The
js/weak-cryptographic-algorithmquery now flags cryptograhic operations using a weak block mode, such as AES-ECB.
- Fixed a bug where a destructuring pattern could not be parsed if it had a property
named
getorsetwith a default value.