We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 65b4424 commit 349a851Copy full SHA for 349a851
javascript/change-notes/2021-08-02-handlebars-extraction.md
@@ -0,0 +1,6 @@
1
+lgtm,codescanning
2
+* Added support for more templating languages.
3
+ - EJS, Mustache, Handlebars, Nunjucks, Hogan, and Swig are now supported.
4
+ - Template tags from the above dialects are now recognized as sinks
5
+ when not escaped safely for the context, leading to additional results for `js/xss` and `js/code-injection`.
6
+ - Files with the extension `.ejs`, `.hbs`, or `.njk` are now extracted and analyzed.
0 commit comments