hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-17 01:03:14 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
22e030584c56dd9a7ad6e42f518463cb20d903cd
codeql/csharp/ql/lib/change-notes/2024-12-12-add-markupstring-as-html-injection-sink.md
Dave Bartolomeo 22e030584c Revert "Release preparation for version 2.20.1"
2025-01-07 12:14:27 -05:00

242 B
Raw Blame History

category
category
minorAnalysis
  • Added the constructor and explicit cast operator of Microsoft.AspNetCore.Components.MarkupString as an html-injection sink. This will help catch cross-site scripting resulting from using MarkupString.