- The tag
external/cwe/cwe-79has been removed fromjs/disabling-electron-websecurityand the tagexternal/cwe/cwe-079has been added. - The tag
external/cwe/cwe-20has been removed fromjs/count-untrusted-data-external-apiand the tagexternal/cwe/cwe-020has been added. - The tag
external/cwe/cwe-20has been removed fromjs/untrusted-data-to-external-apiand the tagexternal/cwe/cwe-020has been added. - The tag
external/cwe/cwe-20has been removed fromjs/untrusted-data-to-external-api-more-sourcesand the tagexternal/cwe/cwe-020has been added.
- Type information is now propagated more precisely through
Promise.all()calls, leading to more resolved calls and more sources and sinks being detected.