hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-17 17:23:36 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
z80coder/query-pack-release-candidate-2
codeql/javascript/change-notes/2021-08-02-handlebars-extraction.md
Asger Feldthaus 349a851631 JS: Add change note
2021-08-11 12:54:19 +02:00

411 B
Raw Permalink Blame History

lgtm,codescanning

  • Added support for more templating languages.
    • EJS, Mustache, Handlebars, Nunjucks, Hogan, and Swig are now supported.
    • Template tags from the above dialects are now recognized as sinks when not escaped safely for the context, leading to additional results for js/xss and js/code-injection.
    • Files with the extension .ejs, .hbs, or .njk are now extracted and analyzed.