From 95008d1ccb9208b08201958f2dc712d1cb73b7d3 Mon Sep 17 00:00:00 2001 From: Chris Smowton Date: Mon, 15 Feb 2021 14:39:24 +0000 Subject: [PATCH] Update change-notes/2021-02-09-html-templates.md Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com> --- change-notes/2021-02-09-html-templates.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/change-notes/2021-02-09-html-templates.md b/change-notes/2021-02-09-html-templates.md index 02446038162..d742ea4630e 100644 --- a/change-notes/2021-02-09-html-templates.md +++ b/change-notes/2021-02-09-html-templates.md @@ -1,3 +1,2 @@ lgtm,codescanning -* Improved our modelling of Go's builtin `html/template` package to understand that these templates provide context-sensitive escaping of HTML and Javascript special characters. This may reduce false-positive seen by the `go/reflected-xss` query, as well as other queries for which HTML escaping is relevant. - +* Improved our modeling of Go's builtin `html/template` package to understand that these templates provide context-sensitive escaping of HTML and Javascript special characters. This may reduce false-positives seen by the `go/reflected-xss` query, as well as other queries for which HTML escaping is relevant.