Files
codeql/javascript/ql/test/query-tests/Expressions/SuspiciousInvocation/eval.js
2025-02-28 13:27:28 +01:00

25 lines
410 B
JavaScript

function foo() {
var f;
eval("f = alert");
f("Hi"); // OK - initialised by eval
}
function bar() {
var g;
g(); // $ MISSED: Alert
eval("g = alert");
}
function baz() {
var g;
function inner(b) {
if (b) {
inner(false);
g(); // OK - initialised by eval below
} else {
eval("g = alert");
}
}
inner(true);
}