- The
sensitiveResultReceiverpredicate inSensitiveResultReceiverQuery.qllhas been deprecated and replaced withisSensitiveResultReceiverin order to use the new dataflow API.
- Changed some models of Spring's
FileCopyUtils.copyto be path injection sinks instead of summaries. - Added models for the following packages:
- java.nio.file
- Added models for Apache HttpComponents versions 4 and 5.
- Added sanitizers that recognize line breaks to the query
java/log-injection. - Added new flow steps for
java.util.StringJoiner.