mirror of
https://github.com/github/codeql.git
synced 2026-04-28 10:15:14 +02:00
Added a step from parse to opts for commander js
This commit is contained in:
@@ -95,6 +95,11 @@ private class ArgsParseStep extends TaintTracking::SharedTaintStep {
|
||||
pred = call.getArgument(0)
|
||||
)
|
||||
or
|
||||
exists(API::Node commanderNode | commanderNode = commander() |
|
||||
pred = commanderNode.getMember("parse").getACall().getAnArgument() and
|
||||
succ = commanderNode.getMember("opts").getACall()
|
||||
)
|
||||
or
|
||||
exists(DataFlow::MethodCallNode methodCall | methodCall = yargs() |
|
||||
pred = methodCall.getReceiver() and
|
||||
succ = methodCall
|
||||
|
||||
Reference in New Issue
Block a user