---
category: minorAnalysis
---
* The `js/regex-injection` query now recognizes environment variables and command-line arguments as sources.