Merge branch 'main' into js/move-cors-query-from-experimental

This commit is contained in:
Napalys Klicius
2025-09-05 12:11:09 +02:00
committed by GitHub
106 changed files with 14432 additions and 8745 deletions

View File

@@ -46,9 +46,7 @@ string getKind(MemberDeclaration m) {
* A call-signature that originates from a MethodSignature in the AST.
*/
private class MethodCallSig extends Function {
private MethodSignature signature;
MethodCallSig() { this = signature.getBody() }
MethodCallSig() { this = any(MethodSignature signature).getBody() }
int getNumOptionalParameter() {
result = count(Parameter p | p = this.getParameter(_) and p.isDeclaredOptional())

View File

@@ -0,0 +1,4 @@
---
category: minorAnalysis
---
* The query `js/remote-property-injection` now detects property injection vulnerabilities through object enumeration patterns such as `Object.keys()`.