hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 19:26:02 +02:00
Code Issues Packages Projects Releases Wiki Activity

add mkdirp as a sink for tainted-path

Browse Source
This commit is contained in:
Erik Krogh Kristensen
2021-07-14 19:23:18 +02:00
parent e0a123cbd0
commit 14b26f2a68
4 changed files with 325 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
javascript/change-notes/2021-07-14-mkdirp.md Normal file
View File

@@ -0,0 +1,4 @@
lgtm,codescanning
* The `js/tainted-path` now recognizes the `mkdirp` library as a sink.
Affected packages are
[mkdirp](https://www.npmjs.com/package/mkdirp)