add change note

erik-krogh · erik-krogh · commit af7a188bbd3f · 2021-02-26T17:18:30.000+01:00
diff --git a/javascript/change-notes/2021-02-25-http-proxy.md b/javascript/change-notes/2021-02-25-http-proxy.md
@@ -0,0 +1,4 @@
+lgtm,codescanning
+* Sources of user input and sinks for `js/request-forgery` in the http-proxy are now recognized. 
+  Affected packages are
+    [http-proxy](https://www.npmjs.com/package/http-proxy)
