Add change note

github · Sep 28, 2023 · 1c01a67 · 1c01a67
1 parent 27b392c
commit 1c01a67
Showing 1 changed file with 20 additions and 0 deletions.
diff --git a/java/ql/lib/change-notes/2023-09-28-moved-localuserinput-to-mad.md b/java/ql/lib/change-notes/2023-09-28-moved-localuserinput-to-mad.md
@@ -0,0 +1,20 @@
+---
+category: minorAnalysis
+---
+* Modified the `EnvInput` class in `semmle.code.java.dataflow.FlowSources` to include `environment` and `file` source nodes.
+* Added `environment` source models for the following methods:
+  * `java.lang.System#getenv`
+  * `java.lang.System#getProperties`
+  * `java.lang.System#getProperty`
+  * `java.util.Properties#get`
+  * `java.util.Properties#getProperty`
+* Added `file` source models for the following methods:
+  * the `java.io.FileInputStream` constructor
+  * `hudson.FilePath#newInputStreamDenyingSymlinkAsNeeded`
+  * `hudson.FilePath#openInputStream`
+  * `hudson.FilePath#read`
+  * `hudson.FilePath#readFromOffset`
+  * `hudson.FilePath#readToString`
+* Modified the `DatabaseInput` class in `semmle.code.java.dataflow.FlowSources` to include `database` source nodes.
+* Added `database` source models for the following method:
+  * `java.sql.ResultSet#getString`