JS: "this" in a template is not the global object

2026-04-27 09:45:15 +02:00 · 2021-07-21 09:18:02 +02:00
parent ee33c593e0
commit 623557ba39
1 changed files with 2 additions and 1 deletions
--- a/javascript/ql/src/semmle/javascript/dataflow/Nodes.qll
+++ b/javascript/ql/src/semmle/javascript/dataflow/Nodes.qll
@@ -374,7 +374,8 @@ DataFlow::SourceNode globalObjectRef() {
  // top-level `this`
  exists(StmtContainer sc |
    sc = result.(ThisNode).getBindingContainer() and
-    not sc instanceof Function
+    not sc instanceof Function and
+    not sc instanceof Templating::TemplateTopLevel
  )
  or
  // DOM