codeql/go/old-change-notes/2020-09-10-xss-false-positives.md

mirror of https://github.com/github/codeql.git synced 2025-12-16 16:53:25 +01:00
lgtm,codescanning
* The query "Reflected cross-site scripting" (`go/reflected-xss`) now recognizes more cases of JSON marshaled data, which cannot serve as a vector for an XSS attack. This may reduce false-positive results for this query.
	`lgtm,codescanning`
	* The query "Reflected cross-site scripting" (`go/reflected-xss`) now recognizes more cases of JSON marshaled data, which cannot serve as a vector for an XSS attack. This may reduce false-positive results for this query.