From 129388c78af3e93cb84f040290cb6cc71b898525 Mon Sep 17 00:00:00 2001 From: Ed Minnix Date: Fri, 13 Dec 2024 12:48:01 -0500 Subject: [PATCH] Fix change note --- .../2024-12-12-add-markupstring-as-html-injection-sink.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/csharp/ql/lib/change-notes/2024-12-12-add-markupstring-as-html-injection-sink.md b/csharp/ql/lib/change-notes/2024-12-12-add-markupstring-as-html-injection-sink.md index eb63db4e65e9..032edbb1f102 100644 --- a/csharp/ql/lib/change-notes/2024-12-12-add-markupstring-as-html-injection-sink.md +++ b/csharp/ql/lib/change-notes/2024-12-12-add-markupstring-as-html-injection-sink.md @@ -1,4 +1,4 @@ --- category: minorAnalysis --- -* Added the constructor of `Microsoft.AspNetCore.Components.MarkupString` as an `html-injection` sink. This will help catch cross-site scripting resulting from using `MarkupString`. +* Added the constructor and explicit cast operator of `Microsoft.AspNetCore.Components.MarkupString` as an `html-injection` sink. This will help catch cross-site scripting resulting from using `MarkupString`.