codeql/javascript/old-change-notes/2021-06-22-templates.md

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

10 строки
474 B
Markdown
Исходник Обычный вид История

lgtm,codescanning
* More template engines are recognized as sinks for the `js/code-injection` query.
Affected packages are
[mustache](https://npmjs.com/package/mustache),
[handlebars](https://npmjs.com/package/handlebars),
[dot](https://npmjs.com/package/dot),
[hogan.js](https://npmjs.com/package/hogan.js)
[eta](https://npmjs.com/package/eta),
[squirrelly](https://npmjs.com/package/squirrelly),
[whiskers](https://npmjs.com/package/whiskers)