Files
codeql/javascript/ql/test/library-tests/TaintTracking/spread.js

10 lines
209 B
JavaScript

function test() {
let taint = source();
sink({ ...taint }); // NOT OK
sink({ f: 'hello', ...taint, g: 'world' }); // NOT OK
sink([ ...taint ]); // NOT OK
sink([ 1, 2, ...taint, 3 ]); // NOT OK
}