JS: Add plain taint step through Promise.all()

2026-05-04 21:25:44 +02:00 · 2024-03-13 08:57:42 +01:00
parent 13a8e0fbf0
commit 858c79e395
2 changed files with 5 additions and 2 deletions
--- a/javascript/ql/lib/semmle/javascript/internal/flow_summaries/Promises.qll
+++ b/javascript/ql/lib/semmle/javascript/internal/flow_summaries/Promises.qll
@@ -228,6 +228,10 @@ private class PromiseAll extends SummarizedCallable {
    preservesValue = true and
    input = "Argument[0].ArrayElement.WithAwaited[error]" and
    output = "ReturnValue"
+    or
+    preservesValue = false and
+    input = "Argument[0]" and
+    output = "ReturnValue"
  }
 }