Files
codeql/go/old-change-notes/2020-10-12-x-net-html.md
2022-05-20 10:07:19 -07:00

4 lines
363 B
Markdown

lgtm,codescanning
* Added partial support for the `golang.org/x/net/html` package, modeling tainted data flow from a retrieved HTML document to its attributes and other data.
* Modeled more ways of writing data to an `net/http.ResponseWriter`. This may produce more results from queries such as `go/reflected-xss` which look for data flowing to an HTTP response.