Add change note

atorralba · atorralba · commit 7a1b854678ce · 2021-12-15T16:53:46.000+01:00
diff --git a/java/change-notes/2021-10-20-android-fragment-injection-query.md b/java/change-notes/2021-10-20-android-fragment-injection-query.md
@@ -0,0 +1,3 @@
+lgtm,codescanning
+* Two new queries, "Android Fragment injection" (`java/android/fragment-injection`) and "Android Fragment injection in PreferenceActivity" (`java/android/fragment-injection-preference-activity`) have been added.
+These queries find exported Android Activities that instantiate and host Fragments created from user-provided data, which can lead to access control bypass and exposes the application to unintended effects.

Original file line number	Diff line number	Diff line change
`@@ -0,0 +1,3 @@`
	`1`	`+lgtm,codescanning`
	`2`	+* Two new queries, "Android Fragment injection" (`java/android/fragment-injection`) and "Android Fragment injection in PreferenceActivity" (`java/android/fragment-injection-preference-activity`) have been added.
	`3`	`+These queries find exported Android Activities that instantiate and host Fragments created from user-provided data, which can lead to access control bypass and exposes the application to unintended effects.`