mirror of
https://github.com/github/codeql.git
synced 2026-04-08 00:24:03 +02:00
30 lines
990 B
Plaintext
30 lines
990 B
Plaintext
/**
|
|
* Provides classes and predicates for working with the [prettier](https://www.npmjs.com/package/prettier) library.
|
|
*/
|
|
|
|
import javascript
|
|
|
|
/** Provides classes and predicates modelling aspects of the [prettier](https://www.npmjs.com/package/prettier) library. */
|
|
private module Prettier {
|
|
/**
|
|
* A taint step from the [prettier API](https://prettier.io/docs/en/api.html).
|
|
*/
|
|
private class PrettierTaintStep extends TaintTracking::SharedTaintStep {
|
|
override predicate step(DataFlow::Node pred, DataFlow::Node succ) {
|
|
exists(API::CallNode call |
|
|
call = API::moduleImport("prettier").getMember("format").getACall()
|
|
|
|
|
pred = call.getArgument(0) and
|
|
succ = call
|
|
)
|
|
or
|
|
exists(API::CallNode call |
|
|
call = API::moduleImport("prettier").getMember("formatWithCursor").getACall()
|
|
|
|
|
pred = call.getArgument(0) and
|
|
succ = call.getReturn().getMember("formatted").getAnImmediateUse()
|
|
)
|
|
}
|
|
}
|
|
}
|