- Data passed to the Response constructor is now treated as a sink for
js/reflected-xss. - Slightly improved detection of DOM element references, leading to XSS results being detected in more cases.
- Fixed a bug that would prevent extraction of
tsconfig.jsonfiles when it contained an array literal with a trailing comma.