We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent f23c603 commit 4bb2e8bCopy full SHA for 4bb2e8b
2 files changed
javascript/ql/src/semmle/javascript/DOM.qll
@@ -309,6 +309,8 @@ module DOM {
309
not read.mayHavePropertyName(_)
310
or
311
read.mayHavePropertyName(getADomPropertyName())
312
+ or
313
+ read.mayHavePropertyName(any(string s | exists(s.toInt())))
314
)
315
316
this = domElementCreationOrQuery()
javascript/ql/test/query-tests/Security/CWE-079/externs.js
@@ -25,6 +25,24 @@
25
function EventTarget() {}
26
27
/**
28
- * @type {!EventTarget}
+ * Stub for the DOM hierarchy.
29
+ *
30
+ * @constructor
31
+ * @extends {EventTarget}
32
+ */
33
+function DomObjectStub() {}
34
+
35
+/**
36
+ * @type {!DomObjectStub}
37
38
+DomObjectStub.prototype.body;
39
40
41
42
43
+DomObjectStub.prototype.value;
44
45
46
47
*/
48
var document;
0 commit comments