add change-note

erik-krogh · erik-krogh · commit df295e69d6e5 · 2022-04-12T14:37:51.000+02:00
diff --git a/javascript/ql/src/change-notes/2022-04-12-postmessage-origin-verification.md b/javascript/ql/src/change-notes/2022-04-12-postmessage-origin-verification.md
@@ -0,0 +1,5 @@
+---
+category: newQuery
+---
+* The `js/missing-origin-check` query has been added. It highlights "message" event handlers that do not check the origin of the event.  
+  The query previously existed as the experimental `js/missing-postmessageorigin-verification` query.
