add lodash.{clone, cloneDeep} as a clone step

2026-04-30 03:05:15 +02:00 · 2022-02-21 22:27:29 +01:00
parent e42f759f6b
commit e8df6a14ca
1 changed files with 2 additions and 0 deletions
--- a/javascript/ql/lib/semmle/javascript/Extend.qll
+++ b/javascript/ql/lib/semmle/javascript/Extend.qll
@@ -182,6 +182,8 @@ private class CloneStep extends PreCallGraphStep {
      call = DataFlow::moduleImport(["clone", "fclone", "sort-keys", "camelcase-keys"]).getACall()
      or
      call = DataFlow::moduleMember("json-cycle", ["decycle", "retrocycle"]).getACall()
+      or
+      call = LodashUnderscore::member(["clone", "cloneDeep"]).getACall()
    |
      pred = call.getArgument(0) and
      succ = call