add change note

This commit is contained in:
Erik Krogh Kristensen
2021-03-17 13:10:03 +01:00
parent 3995ff322d
commit b2d6982318

View File

@@ -0,0 +1,5 @@
lgtm,codescanning
* Route handlers registered using koa routing libraries are recognized as a source of remote user input.
Affected packages are
[koa-route](https://www.npmjs.com/package/koa-route), and
[koa-router](https://www.npmjs.com/package/koa-router)