codeql/javascript/old-change-notes/2021-02-26-form-data.md

lgtm,codescanning

• URIs used in the form-data library are now recognized as sinks for js/request-forgery. Affected packages are form-data