mirror of
https://github.com/github/codeql.git
synced 2026-04-25 16:55:19 +02:00
JS: Fix the spurious flow
This commit is contained in:
@@ -39,7 +39,7 @@ require('express')().get('/foo', (req, res) => {
|
||||
req.params.id, // $ Alert
|
||||
req.params.name, // $ Alert
|
||||
req.params.foo, // OK - not using raw interpolation
|
||||
] // $ SPURIOUS: Alert - implicit reads causes flow here in addition to the individual array elements
|
||||
]
|
||||
});
|
||||
db.one({
|
||||
text: 'SELECT * FROM news where id = ${id}:raw AND name = ${name}',
|
||||
|
||||
Reference in New Issue
Block a user