hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-24 08:15:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

JS: Do not track instance methods

Browse Source
This commit is contained in:
Asger F
2024-03-04 10:32:27 +01:00
parent f5d014baa5
commit 4ab7acedb6
1 changed files with 7 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
javascript/ql/lib/semmle/javascript/dataflow/internal/CallGraphs.qll
View File

@@ -249,7 +249,13 @@ module CallGraph {
or
result = node.(DataFlow::ObjectLiteralNode).getPropertySetter(_)
) and
not node.getTopLevel().isExterns()
not node.getTopLevel().isExterns() and
// Do not track instance methods on classes
not exists(DataFlow::ClassNode cls |
node = cls.getConstructor().getReceiver()
or
node = cls.(DataFlow::ClassNode::FunctionStyleClass).getAPrototypeReference()
)
}
private predicate shouldTrackObjectWithMethods(DataFlow::SourceNode node) {