hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-16 16:53:25 +01:00
Code Issues Packages Projects Releases Wiki Activity

javascript: Update property access for `document.defaultView as getAPropertyRead

Browse Source 
Changed the method for accessing `defaultView` from `getAPropertyReference` to `getAPropertyRead` to improve accuracy in data flow analysis for global variable references.
This commit is contained in:
eliav
2025-11-17 01:05:58 +02:00
parent bd18e862eb
commit 8047450668
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
javascript/ql/lib/semmle/javascript/dataflow/Nodes.qll
View File

@@ -384,7 +384,7 @@ DataFlow::SourceNode globalObjectRef() {
result = globalVariable("window")
or
// DOM alias via `document.defaultView`
result = globalVariable("document").getAPropertyReference("defaultView")
result = globalVariable("document").getAPropertyRead("defaultView")
or
// Node.js
result = globalVariable("global")