Merge pull request #6134 from erik-krogh/templates

Approved by asgerf, esbena
This commit is contained in:
CodeQL CI
2021-06-23 05:09:23 -07:00
committed by GitHub
5 changed files with 211 additions and 84 deletions

View File

@@ -0,0 +1,10 @@
lgtm,codescanning
* More template engines are recognized as sinks for the `js/code-injection` query.
Affected packages are
[mustache](https://npmjs.com/package/mustache),
[handlebars](https://npmjs.com/package/handlebars),
[dot](https://npmjs.com/package/dot),
[hogan.js](https://npmjs.com/package/hogan.js)
[eta](https://npmjs.com/package/eta),
[squirrelly](https://npmjs.com/package/squirrelly),
[whiskers](https://npmjs.com/package/whiskers)