JS: Avoid materializing HTML::Element.getFile()

2026-04-27 17:55:19 +02:00 · 2019-08-29 12:08:40 +01:00
parent 33267067e0
commit 6c0f9be6df
1 changed files with 2 additions and 1 deletions
--- a/javascript/ql/src/semmle/javascript/frameworks/Vue.qll
+++ b/javascript/ql/src/semmle/javascript/frameworks/Vue.qll
@@ -352,7 +352,8 @@ module Vue {
    }

    private Module getModule() {
-      exists(HTML::ScriptElement elem | elem.getFile() = file |
+      exists(HTML::ScriptElement elem |
+        xmlElements(elem, _, _, _, file) and // Avoid materializing all of Locatable.getFile()
        result.getTopLevel() = elem.getScript()
      )
    }