We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 2dedfb3 commit 1243c73Copy full SHA for 1243c73
javascript/ql/lib/semmle/javascript/security/dataflow/PrototypePollutingAssignmentQuery.qll
@@ -34,10 +34,7 @@ class Configuration extends TaintTracking::Configuration {
34
// Concatenating with a string will in practice prevent the string `__proto__` from arising.
35
exists(StringOps::ConcatenationRoot root | node = root |
36
// Exclude the string coercion `"" + node` from this filter.
37
- not (
38
- strictcount(root.getALeaf()) = 2 and
39
- root.getALeaf().getStringValue() = ""
40
- )
+ not node.(StringOps::ConcatenationNode).isCoercion()
41
)
42
}
43
0 commit comments