Update javascript/change-notes/2021-02-08-xml-parser-taint.md

Co-authored-by: Asger F <asgerf@github.com>
This commit is contained in:
Erik Krogh Kristensen
2021-02-11 13:33:42 +01:00
committed by GitHub
parent 4969a1ef4f
commit 3ee0029cd8

View File

@@ -1,8 +1,8 @@
lgtm,codescanning
* The security queries now track taint through XML parsers.
Affected packages are
[xml2js](https://www.npmjs.com/package/xml2js) and
[sax](https://www.npmjs.com/package/sax) and
[xml-js](https://www.npmjs.com/package/xml-js) and
[htmlparser2](https://www.npmjs.com/package/htmlparser2) and
[xml2js](https://www.npmjs.com/package/xml2js),
[sax](https://www.npmjs.com/package/sax),
[xml-js](https://www.npmjs.com/package/xml-js),
[htmlparser2](https://www.npmjs.com/package/htmlparser2), and
[node-expat](https://www.npmjs.com/package/node-expat)