mirror of
https://github.com/github/codeql.git
synced 2026-04-26 17:25:19 +02:00
correctly weed out benign calls inside attributes
This commit is contained in:
@@ -45,7 +45,7 @@ predicate benignContext(Expr e) {
|
||||
|
||||
or
|
||||
// weeds out calls inside HTML-attributes.
|
||||
e.getParent() instanceof CodeInAttribute or
|
||||
e.getParent().(ExprStmt).getParent() instanceof CodeInAttribute or
|
||||
// and JSX-attributes.
|
||||
e = any(JSXAttribute attr).getValue() or
|
||||
|
||||
|
||||
Reference in New Issue
Block a user