mirror of
https://github.com/github/codeql.git
synced 2026-04-25 08:45:14 +02:00
Strangely, there are two separate paths to each of the JSEvaluateScript sinks: one passing through the JSString constructor, one omitting this step.