codeql/javascript/ql/test/query-tests/LanguageFeatures/IllegalInvocation/tst.js

class C {
  m() {}
}

class D extends C {
  constructor() {
    super(); // OK
  }
}

let c = new C(); // OK
C();             // NOT OK
new (x=>x);      // NOT OK
c.m();           // OK
new c.m();       // NOT OK - but not flagged

var o = {
  f: function() {},
  g() {}
};
o.f();           // OK
new o.f();       // OK
o.g();           // OK
new o.g();       // NOT OK - but not flagged

function f(b) {
  var g;
  if (b)
    g = class {};
  else
    g = (() => {});
  console.log();
  if (!b)
    g();         // OK
  else
    new g();     // OK
}

function* g() {}
async function h() {}

new g()          // NOT OK
new h()          // NOT OK

C.call();        // NOT OK
C.apply();       // NOT OK

class E {
  static call() {}
  static apply() {}
}

E.call();        // OK
E.apply();       // OK

function invoke(fn) {
  if (typeof fn === "function" && fn.hasOwnProperty("foo")) {
    fn(); // OK
  }
}
invoke(C);
invoke(function() {});