lgtm,codescanning
* The `js/xss-through-dom` query now recognizes form inputs as sources.
  Affected packages are
    [formik](https://www.npmjs.com/package/formik) and
    [react-final-form](https://www.npmjs.com/package/react-final-form) and
    [react-hook-form](https://www.npmjs.com/package/react-hook-form)