We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 4075f57 commit 335a969Copy full SHA for 335a969
javascript/ql/src/semmle/javascript/dataflow/DataFlow.qll
@@ -496,7 +496,11 @@ module DataFlow {
496
override string getPropertyName() { result = odp.getPropertyName() }
497
498
override Node getRhs() {
499
- odp.getAPropertyAttribute().writes(_, "value", result)
+ // not using `CallToObjectDefineProperty::getAPropertyAttribute` for performance reasons
500
+ exists(ObjectLiteralNode propdesc |
501
+ propdesc.flowsTo(odp.getPropertyDescriptor()) and
502
+ propdesc.hasPropertyWrite("value", result)
503
+ )
504
}
505
506
override ControlFlowNode getWriteNode() { result = odp.getAstNode() }
0 commit comments