Skip to content

7.4.0.md

Latest commit

 

History

History
9 lines (5 loc) · 445 Bytes

7.4.0.md

File metadata and controls

9 lines (5 loc) · 445 Bytes
Raw

7.4.0

Major Analysis Improvements

  • Fixed a false positive in cs/web/xss for ASP.NET Core Razor Pages/MVC views: WriteLiteral calls generated for tag helper attribute values (for example, asp-for) capture the value into an internal buffer instead of writing it directly to the response, so they are no longer treated as XSS sinks.

Bug Fixes

  • Fixed an issue where types for pattern expressions were not extracted correctly.