mirror of
https://github.com/github/codeql.git
synced 2025-12-17 09:13:20 +01:00
17 lines
432 B
JavaScript
17 lines
432 B
JavaScript
(function () {
|
|
var source = "source";
|
|
|
|
class Foo {
|
|
#priv = source;
|
|
getPriv() {
|
|
return this.#priv;
|
|
}
|
|
|
|
getFalsePrivate() {
|
|
return this["#priv"]; // not the same field as above. But we currently don't distinguish private and "public" fields.
|
|
}
|
|
}
|
|
sink(new Foo().getPriv()); // NOT OK.
|
|
|
|
sink(new Foo().getFalsePrivate()); // OK [FP: Is FP because we do nothing special about dataflow for private fields.]
|
|
})(); |