Java: add change note

github · Dec 17, 2024 · 4417f74 · 4417f74
1 parent cc3763b
commit 4417f74
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/java/ql/src/change-notes/2024-12-16-csrf-unprotected-request-type.md b/java/ql/src/change-notes/2024-12-16-csrf-unprotected-request-type.md
@@ -0,0 +1,4 @@
+---
+category: newQuery
+---
+* Added a new query, `java/csrf-unprotected-request-type`, to detect Cross-Site Request Forgery (CSRF) vulnerabilities due to using HTTP request types that are not default-protected from CSRF.