hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-03-30 12:18:18 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
c2d203772628a86c23e516aff02e6000eab8fa2a
codeql/javascript/change-notes/2021-08-02-handlebars-extraction.md
Asger Feldthaus 349a851631 JS: Add change note
2021-08-11 12:54:19 +02:00

411 B
Raw Blame History

lgtm,codescanning

  • Added support for more templating languages.
    • EJS, Mustache, Handlebars, Nunjucks, Hogan, and Swig are now supported.
    • Template tags from the above dialects are now recognized as sinks when not escaped safely for the context, leading to additional results for js/xss and js/code-injection.
    • Files with the extension .ejs, .hbs, or .njk are now extracted and analyzed.