hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 11:15:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

JavaScript: Make Script and CodeInAttribute concrete.

Browse Source
This commit is contained in:
Max Schaefer
2019-05-31 12:04:14 +01:00
parent 653c8b8496
commit c560096b17
1 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
javascript/ql/src/semmle/javascript/AST.qll
View File

@@ -182,7 +182,9 @@ class TopLevel extends @toplevel, StmtContainer {
/**
* A stand-alone file or script originating from an HTML `<script>` element.
*/
abstract class Script extends TopLevel { }
class Script extends TopLevel {
Script() { this instanceof @script or this instanceof @inline_script }
}
/**
* A stand-alone file or an external script originating from an HTML `<script>` element.
@@ -197,7 +199,9 @@ class InlineScript extends @inline_script, Script { }
/**
* A code snippet originating from an HTML attribute value.
*/
abstract class CodeInAttribute extends TopLevel { }
class CodeInAttribute extends TopLevel {
CodeInAttribute() { this instanceof @event_handler or this instanceof @javascript_url }
}
/**
* A code snippet originating from an event handler attribute.