JS: Treat string literals as source nodes

2026-05-02 04:05:14 +02:00 · 2021-06-28 23:24:41 +02:00
parent 80124df78e
commit 39c204ac39
1 changed files with 2 additions and 1 deletions
--- a/javascript/ql/src/semmle/javascript/dataflow/Sources.qll
+++ b/javascript/ql/src/semmle/javascript/dataflow/Sources.qll
@@ -321,7 +321,8 @@ module SourceNode {
        astNode instanceof ImportMetaExpr or
        astNode instanceof TaggedTemplateExpr or
        astNode instanceof Angular2::PipeRefExpr or
-        astNode instanceof Angular2::TemplateVarRefExpr
+        astNode instanceof Angular2::TemplateVarRefExpr or
+        astNode instanceof StringLiteral
      )
      or
      DataFlow::parameterNode(this, _)