mirror of
https://github.com/github/codeql.git
synced 2025-12-17 09:13:20 +01:00
86932c51bc
One of the diffs look confusing but:
Previously parameter {2,3} where flagged, now parameter {1,2} are flagged.
Note that for command injection, the SystemCommandExecution is flagged
despite the test file claiming otherwise.
22 lines
417 B
JavaScript
22 lines
417 B
JavaScript
function f(
|
|
x, // $ Alert
|
|
x, // $ Alert
|
|
\u0078
|
|
) { return; }
|
|
|
|
this.addPropertyListener(prop.name, function(_, _, _, a) {
|
|
proxy.delegate = a.dao;
|
|
});
|
|
|
|
// OK - for strict mode functions, duplicate parameter names are a syntax error
|
|
function f(x, y, x) {
|
|
'use strict';
|
|
}
|
|
|
|
function f(
|
|
x,
|
|
x // OK - empty function
|
|
) { }
|
|
|
|
(a, a) => a + a; // OK - for strict mode functions, duplicate parameter names are a syntax error
|