mirror of
https://github.com/github/codeql.git
synced 2026-04-21 23:14:03 +02:00
Update DataFlowImplConsistency.qll
This commit is contained in:
@@ -37,6 +37,12 @@ private module ConsistencyConfig implements InputSig<Location, JSDataFlow> {
|
||||
isAmbientNode(call.asOrdinaryCall()) or
|
||||
isAmbientNode(call.asAccessorCall())
|
||||
}
|
||||
|
||||
predicate argHasPostUpdateExclude(ArgumentNode node) {
|
||||
// Side-effects directly on these can't propagate back to the caller, and for longer access paths it's too imprecise
|
||||
node instanceof TStaticArgumentArrayNode or
|
||||
node instanceof TDynamicArgumentArrayNode
|
||||
}
|
||||
}
|
||||
|
||||
module Consistency = MakeConsistency<Location, JSDataFlow, JSTaintFlow, ConsistencyConfig>;
|
||||
|
||||
Reference in New Issue
Block a user