Ruby: rack - env['QUERY_STRING'] changenote

alexrford · alexrford · commit ec2c9f20f669 · 2023-07-05T15:46:56.000+01:00
diff --git a/ruby/ql/lib/change-notes/2023-07-05-rack-env-query-params.md b/ruby/ql/lib/change-notes/2023-07-05-rack-env-query-params.md
@@ -0,0 +1,4 @@
+---
+category: minorAnalysis
+---
+* The `'QUERY_STRING'` field of a Rack `env` parameter is now recognized as a source of remote user input.

-Original file line number
+Diff line change
@@ @@ -0,0 +1,4 @@ @@
 +---
 +category: minorAnalysis
 +---
 +* The `'QUERY_STRING'` field of a Rack `env` parameter is now recognized as a source of remote user input.