codeql/2021-02-08-xml-parser-taint.md at z80coder/query-pack-release-candidate-2

mirror of https://github.com/github/codeql.git synced 2025-12-17 17:23:36 +01:00

Files

Erik Krogh Kristensen 3ee0029cd8 Update javascript/change-notes/2021-02-08-xml-parser-taint.md

Co-authored-by: Asger F <asgerf@github.com>

2021-02-11 13:33:42 +01:00

lgtm,codescanning

The security queries now track taint through XML parsers. Affected packages are xml2js, sax, xml-js, htmlparser2, and node-expat