extensions: - addsTo: pack: codeql/java-all extensible: sinkModel data: - ["javax.xml.transform", "Transformer", False, "transform", "", "", "Argument[this]", "xslt-injection", "manual"]