JS: remove serialize-javascript from JsonParsers.qll as it is not a parser

Napalys · Napalys · commit eca69e1654ad · 2025-06-16T12:59:36.000+02:00
diff --git a/javascript/ql/lib/semmle/javascript/JsonParsers.qll b/javascript/ql/lib/semmle/javascript/JsonParsers.qll
@@ -33,8 +33,7 @@ private class PlainJsonParserCall extends JsonParserCall {
       callee = DataFlow::moduleImport("parse-json") or
       callee = DataFlow::moduleImport("json-parse-better-errors") or
       callee = DataFlow::moduleImport("json-safe-parse") or
-      callee = AngularJS::angular().getAPropertyRead("fromJson") or
-      callee = DataFlow::moduleImport("serialize-javascript")
+      callee = AngularJS::angular().getAPropertyRead("fromJson")
     )
   }
 

Original file line number	Diff line number	Diff line change
`@@ -33,8 +33,7 @@ private class PlainJsonParserCall extends JsonParserCall {`
`33`	`33`	`callee = DataFlow::moduleImport("parse-json") or`
`34`	`34`	`callee = DataFlow::moduleImport("json-parse-better-errors") or`
`35`	`35`	`callee = DataFlow::moduleImport("json-safe-parse") or`
`36`		`- callee = AngularJS::angular().getAPropertyRead("fromJson") or`
`37`		`- callee = DataFlow::moduleImport("serialize-javascript")`
	`36`	`+ callee = AngularJS::angular().getAPropertyRead("fromJson")`
`38`	`37`	`)`
`39`	`38`	`}`
`40`	`39`