codeql/go/old-change-notes/2020-10-12-x-net-html.md

363 B

lgtm,codescanning

  • Added partial support for the golang.org/x/net/html package, modeling tainted data flow from a retrieved HTML document to its attributes and other data.
  • Modeled more ways of writing data to an net/http.ResponseWriter. This may produce more results from queries such as go/reflected-xss which look for data flowing to an HTTP response.