category minorAnalysis The query "CORS misconfiguration" (js/cors-misconfiguration) has been promoted from experimental and is now part of the default security suite.