Files
codeql/javascript/ql/src/DOM/Alert.ql

17 lines
378 B
Plaintext

/**
* @name Invocation of alert
* @description 'alert' should not be used in production code.
* @kind problem
* @problem.severity recommendation
* @id js/alert-call
* @tags quality
* reliability
* correctness
* external/cwe/cwe-489
* @precision medium
*/
import javascript
select DataFlow::globalVarRef("alert").getACall(), "Avoid calling alert."