Update javascript/ql/lib/change-notes/2025-02-12-express-download.md

Kwstubbs · asgerf · web-flow · commit 253882c3d1a3 · 2025-02-12T11:01:29.000-08:00
Co-authored-by: Asger F &lt;asgerf@github.com&gt;
diff --git a/javascript/ql/lib/change-notes/2025-02-12-express-download.md b/javascript/ql/lib/change-notes/2025-02-12-express-download.md
@@ -1,4 +1,4 @@
 ---
 category: minorAnalysis
 ---
-* Added result.download() function to ResponseDownloadAsFileSystemAccess to FileSystemReadAccess
+* The `response.download()` function in `express` is now recognized as a sink for path traversal attacks.
