Add change note

github · Jan 28, 2025 · 2d76466 · 2d76466
1 parent 0ccf4ce
commit 2d76466
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/java/ql/src/change-notes/2025-01-28-fix-xss-content-type-safe.md b/java/ql/src/change-notes/2025-01-28-fix-xss-content-type-safe.md
@@ -0,0 +1,4 @@
+---
+category: majorAnalysis
+---
+* Fixed false positive alerts in the java query "Cross-site scripting" (`java/xss`) when `javax.servlet.http.HttpServletResponse` is used with a content type which is not exploitable.