codeql/java/change-notes/2021-05-12-xxe-fp-fix.md

lgtm,codescanning

• The query "Resolving XML external entity in user-controlled data" (java/xxe) has been improved to report fewer false positives when a Builder / Factory (e.g. an XMLInputFactory) is configured safely by using a boxed boolean as second argument to one or more of its configuration methods.