Update DataFlowImplConsistency.qll

This commit is contained in:
Asger F
2024-08-12 14:08:07 +02:00
parent bbb1c8c374
commit 60c3d077b2

View File

@@ -37,6 +37,12 @@ private module ConsistencyConfig implements InputSig<Location, JSDataFlow> {
isAmbientNode(call.asOrdinaryCall()) or
isAmbientNode(call.asAccessorCall())
}
predicate argHasPostUpdateExclude(ArgumentNode node) {
// Side-effects directly on these can't propagate back to the caller, and for longer access paths it's too imprecise
node instanceof TStaticArgumentArrayNode or
node instanceof TDynamicArgumentArrayNode
}
}
module Consistency = MakeConsistency<Location, JSDataFlow, JSTaintFlow, ConsistencyConfig>;