hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-26 17:25:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

JS: Add: Array.protype.findLast as taint step

Browse Source
This commit is contained in:
Napalys
2024-11-15 14:09:44 +01:00
parent ea90698fc1
commit fcb65534a8
5 changed files with 166 additions and 131 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
javascript/ql/lib/semmle/javascript/Arrays.qll
View File

@@ -384,13 +384,16 @@ private module ArrayLibraries {
}
/**
* Gets a call to `Array.prototype.find` or a polyfill implementing the same functionality.
* Gets a call to `Array.prototype.find` or `Array.prototype.findLast` or a polyfill implementing the same functionality.
*/
DataFlow::CallNode arrayFindCall(DataFlow::Node array) {
result.(DataFlow::MethodCallNode).getMethodName() = "find" and
result.(DataFlow::MethodCallNode).getMethodName() in ["find", "findLast"] and
array = result.getReceiver()
or
result = DataFlow::moduleImport(["array.prototype.find", "array-find"]).getACall() and
result =
DataFlow::moduleImport([
"array.prototype.find", "array-find", "array.prototype.findLast", "array-find-last"
]).getACall() and
array = result.getArgument(0)
}