add change note

This commit is contained in:
Erik Krogh Kristensen
2021-02-08 17:31:47 +01:00
parent 101d4358a9
commit 91f7d33044

View File

@@ -0,0 +1,6 @@
lgtm,codescanning
* The `js/xss-through-dom` query now recognizes form inputs as sources.
Affected packages are
[formik](https://www.npmjs.com/package/formik) and
[react-final-form](https://www.npmjs.com/package/react-final-form) and
[react-hook-form](https://www.npmjs.com/package/react-hook-form)