mirror of
https://github.com/github/codeql.git
synced 2026-04-28 18:25:24 +02:00
JS: simplify loop detection
This commit is contained in:
@@ -76,6 +76,6 @@ where
|
||||
dangerous instanceof RegExpGroup
|
||||
) and
|
||||
// don't flag replace operations in a loop
|
||||
not replace.getReceiver() = replace.getASuccessor+()
|
||||
not replace.getReceiver().getALocalSource() = replace
|
||||
select replace, "The replaced string may still contain a substring that starts matching at $@.",
|
||||
dangerous, dangerous.toString()
|
||||
|
||||
Reference in New Issue
Block a user