codeql/javascript/old-change-notes/2021-02-08-xml-parser-taint.md

lgtm,codescanning

• The security queries now track taint through XML parsers. Affected packages are xml2js, sax, xml-js, htmlparser2, and node-expat