Files
codeql/javascript/ql/src/DOM/Alert.ql
2018-08-02 17:53:23 +01:00

15 lines
344 B
Plaintext

/**
* @name Invocation of alert
* @description 'alert' should not be used in production code.
* @kind problem
* @problem.severity recommendation
* @id js/alert-call
* @tags maintainability
* external/cwe/cwe-489
* @precision medium
*/
import javascript
select DataFlow::globalVarRef("alert").getACall(), "Avoid calling alert."