hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-29 18:55:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

add model for whatwg-fetch

Browse Source
This commit is contained in:
Erik Krogh Kristensen
2021-06-04 13:13:13 +02:00
parent 8d7f8a5bab
commit 46f90006c2
4 changed files with 19 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
javascript/ql/src/semmle/javascript/frameworks/ClientRequests.qll
View File

@@ -302,6 +302,8 @@ module ClientRequest {
exists(DataFlow::SourceNode fetch |
fetch = DataFlow::moduleImport(["node-fetch", "cross-fetch", "isomorphic-fetch"])
or
fetch = DataFlow::moduleMember("whatwg-fetch", "fetch")
or
fetch = DataFlow::globalVarRef("fetch") // https://fetch.spec.whatwg.org/#fetch-api
|
this = fetch.getACall() and