Add change note

smowton · smowton · commit 8d7098245b4f · 2022-04-26T10:38:20.000+01:00
diff --git a/java/ql/src/change-notes/2022-04-26-insecure-cookie-named-constants.md b/java/ql/src/change-notes/2022-04-26-insecure-cookie-named-constants.md
@@ -0,0 +1,6 @@
+---
+category: minorAnalysis
+---
+* Query `java/insecure-cookie` no longer produces a false positive if 
+`cookie.setSecure(...)` is called passing a constant that always equals 
+`true`.
