hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-01-05 18:50:23 +01:00
Code Issues Packages Projects Releases Wiki Activity

JS: Drive-by allow trailing commas in dynamic imports

Browse Source
This commit is contained in:
Asger F
2023-03-02 13:32:46 +01:00
parent 8d9060f1f9
commit 3af085afcb
1 changed files with 4 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
javascript/extractor/src/com/semmle/jcorn/ESNextParser.java
View File

@@ -439,7 +439,10 @@ public class ESNextParser extends JSXParser {
Expression source = parseMaybeAssign(false, null, null);
Expression attributes = null;
if (this.eat(TokenType.comma)) {
attributes = this.parseMaybeAssign(false, null, null);
if (this.type != TokenType.parenR) { // Skip if the comma was a trailing comma
attributes = this.parseMaybeAssign(false, null, null);
this.eat(TokenType.comma); // Allow trailing comma
}
}
this.expect(TokenType.parenR);
DynamicImport di = this.finishNode(new DynamicImport(new SourceLocation(startLoc), source, attributes));