mirror of
https://github.com/github/codeql.git
synced 2026-04-30 03:05:15 +02:00
Update javascript/change-notes/2021-02-08-xml-parser-taint.md
Co-authored-by: Asger F <asgerf@github.com>
This commit is contained in:
committed by
GitHub
parent
4969a1ef4f
commit
3ee0029cd8
@@ -1,8 +1,8 @@
|
||||
lgtm,codescanning
|
||||
* The security queries now track taint through XML parsers.
|
||||
Affected packages are
|
||||
[xml2js](https://www.npmjs.com/package/xml2js) and
|
||||
[sax](https://www.npmjs.com/package/sax) and
|
||||
[xml-js](https://www.npmjs.com/package/xml-js) and
|
||||
[htmlparser2](https://www.npmjs.com/package/htmlparser2) and
|
||||
[xml2js](https://www.npmjs.com/package/xml2js),
|
||||
[sax](https://www.npmjs.com/package/sax),
|
||||
[xml-js](https://www.npmjs.com/package/xml-js),
|
||||
[htmlparser2](https://www.npmjs.com/package/htmlparser2), and
|
||||
[node-expat](https://www.npmjs.com/package/node-expat)
|
||||
|
||||
Reference in New Issue
Block a user