mirror of
https://github.com/github/codeql.git
synced 2026-04-27 09:45:15 +02:00
JS: Implement 'speculativeTaintStep'
It is a mandatory part of the interface now; just providing a bare-bones implementation for rather than 'none()'
This commit is contained in:
@@ -104,3 +104,12 @@ predicate defaultImplicitTaintRead(DataFlow::Node node, ContentSet c) {
|
||||
// Optional steps are added through isAdditionalFlowStep but we don't want the implicit reads
|
||||
not optionalStep(node, _, _)
|
||||
}
|
||||
|
||||
predicate speculativeTaintStep(DataFlow::Node node1, DataFlow::Node node2) {
|
||||
exists(DataFlow::CallNode call, DataFlowCall c |
|
||||
not exists(viableCallable(c)) and
|
||||
c.asOrdinaryCall() = call and
|
||||
node1 = call.getAnArgument() and
|
||||
node2 = call
|
||||
)
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user