hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-02 04:05:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

add support for the when polyfill, and expand the defition of ES2015PromiseDefinition

Browse Source
This commit is contained in:
Erik Krogh Kristensen
2021-06-20 18:49:06 +02:00
parent e467ea2ea6
commit bb1c971348
5 changed files with 19 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
javascript/ql/src/semmle/javascript/Promises.qll
View File

@@ -81,6 +81,8 @@ private DataFlow::SourceNode getAPromiseObject() {
result = DataFlow::moduleMember(["es6-promise", "rsvp"], "Promise")
or
result = DataFlow::moduleImport("native-promise-only")
or
result = DataFlow::moduleImport("when")
}
/**
@@ -97,10 +99,11 @@ class PromiseCandidate extends DataFlow::InvokeNode {
}
/**
* A promise object created by the standard ECMAScript 2015 `Promise` constructor.
* A promise object created by the standard ECMAScript 2015 `Promise` constructor,
* or a polyfill implementing a superset of the ECMAScript 2015 `Promise` API.
*/
private class ES2015PromiseDefinition extends PromiseDefinition, DataFlow::NewNode {
ES2015PromiseDefinition() { this = getAPromiseObject().getAnInstantiation() }
private class ES2015PromiseDefinition extends PromiseDefinition, DataFlow::InvokeNode {
ES2015PromiseDefinition() { this = getAPromiseObject().getAnInvocation() }
override DataFlow::FunctionNode getExecutor() { result = getCallback(0) }
}