hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-24 08:15:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix change note

Browse Source
This commit is contained in:
Ed Minnix
2024-12-13 12:48:01 -05:00
parent 8e37a5cd55
commit 129388c78a
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
csharp/ql/lib/change-notes/2024-12-12-add-markupstring-as-html-injection-sink.md
View File

@@ -1,4 +1,4 @@
---
category: minorAnalysis
---
* Added the constructor of `Microsoft.AspNetCore.Components.MarkupString` as an `html-injection` sink. This will help catch cross-site scripting resulting from using `MarkupString`.
* Added the constructor and explicit cast operator of `Microsoft.AspNetCore.Components.MarkupString` as an `html-injection` sink. This will help catch cross-site scripting resulting from using `MarkupString`.