mirror of
https://github.com/github/codeql.git
synced 2025-12-17 09:13:20 +01:00
9d3a9d71f1
Currently, only `arguments[c]` for a constant value `c` is supported. This allows us to detect the prototype-pollution vulnerabilities in (old versions of) `extend`, `jquery`, and `node.extend`.
13 lines
293 B
JavaScript
13 lines
293 B
JavaScript
(function() {
|
|
function f(x) {
|
|
let firstArg = x;
|
|
let alsoFirstArg = arguments[0];
|
|
let secondArg = arguments[1];
|
|
let args = arguments;
|
|
let thirdArg = args[2];
|
|
arguments = {};
|
|
let notFirstArg = arguments[0];
|
|
}
|
|
f(1, 2, 3);
|
|
})();
|