Java: add change note

github · Dec 17, 2024 · 01ff4f4 · 01ff4f4
1 parent 67b6f70
commit 01ff4f4
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/java/ql/src/change-notes/2024-12-16-csrf-unprotected-request-type.md b/java/ql/src/change-notes/2024-12-16-csrf-unprotected-request-type.md
@@ -0,0 +1,4 @@
+---
+category: newQuery
+---
+* Added a new query, `java/csrf-unprotected-request-type`, to detect Cross-Site Request Forgery (CSRF) vulnerabilities due to using HTTP request types that are not default-protected from CSRF.