hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-01-07 11:40:27 +01:00
Code Issues Packages Projects Releases Wiki Activity

JS: model one more 'autobind' for js/unbound-event-handler-receiver

Browse Source
This commit is contained in:
Esben Sparre Andreasen
2019-02-21 08:23:54 +01:00
parent 5754eb666c
commit 27cae0c190
2 changed files with 24 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
javascript/ql/src/Expressions/UnboundEventHandlerReceiver.ql
View File

@@ -28,7 +28,11 @@ private predicate isBoundInMethod(MethodDeclaration method) {
)
or
// require("auto-bind")(this)
thiz.flowsTo(DataFlow::moduleImport("auto-bind").getACall().getArgument(0))
exists (string mod |
mod = "auto-bind" or
mod = "react-autobind" |
thiz.flowsTo(DataFlow::moduleImport(mod).getACall().getArgument(0))
)
or
exists(string name | name = method.getName() |
exists(DataFlow::MethodCallNode bind |