hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-02 12:15:17 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add webix copy function

Browse Source
This commit is contained in:
Kevin Stubbings
2023-06-22 22:16:28 -07:00
parent 7e7e2aaac7
commit 3605269e13
4 changed files with 13 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
javascript/ql/lib/semmle/javascript/Extend.qll
View File

@@ -97,7 +97,7 @@ private class ExtendCallDeep extends ExtendCall {
callee = LodashUnderscore::member("mergeWith") or
callee = LodashUnderscore::member("defaultsDeep") or
callee = AngularJS::angular().getAPropertyRead("merge") or
callee = DataFlow::moduleImport("webix").getAPropertyRead("extend")
callee = DataFlow::moduleImport("webix").getAPropertyRead(["extend", "copy"])
)
}

2
javascript/ql/lib/semmle/javascript/security/dataflow/PrototypePollutionCustomizations.qll
View File

@@ -173,7 +173,7 @@ module PrototypePollution {
id = "angular"
or
call.isDeep() and
call = DataFlow::moduleImport("webix").getAMemberCall("extend") and
call = DataFlow::moduleImport("webix").getAMemberCall(["extend", "copy"]) and
id = "webix"
}
}