Skip to content

Commit 7cd820e

Browse files
committed
JS: Add support for props callbacks in router configs
1 parent 40c3534 commit 7cd820e

File tree

2 files changed

+10
-0
lines changed

2 files changed

+10
-0
lines changed

javascript/ql/lib/semmle/javascript/frameworks/Vue.qll

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -664,6 +664,10 @@ module Vue {
664664
or
665665
result = routeConfig().getMember("beforeEnter").getParameter([0, 1]).asSource()
666666
or
667+
result = routeConfig().getMember("props").getParameter(0).asSource()
668+
or
669+
result = routeConfig().getMember("props").getAMember().getParameter(0).asSource()
670+
or
667671
exists(Component c |
668672
result = c.getABoundFunction().getAFunctionValue().getReceiver().getAPropertyRead("$route")
669673
or

javascript/ql/test/library-tests/frameworks/Vue/tests.expected

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -182,6 +182,9 @@ remoteFlowSource
182182
| router.js:9:17:9:26 | from.query |
183183
| router.js:15:25:15:32 | to.query |
184184
| router.js:16:25:16:34 | from.query |
185+
| router.js:21:20:21:30 | route.query |
186+
| router.js:26:29:26:39 | route.query |
187+
| router.js:27:29:27:39 | route.query |
185188
| router.js:32:9:32:16 | to.query |
186189
| router.js:33:9:33:18 | from.query |
187190
| router.js:38:5:38:12 | to.query |
@@ -227,6 +230,9 @@ threatModelSource
227230
| router.js:9:17:9:26 | from.query | remote |
228231
| router.js:15:25:15:32 | to.query | remote |
229232
| router.js:16:25:16:34 | from.query | remote |
233+
| router.js:21:20:21:30 | route.query | remote |
234+
| router.js:26:29:26:39 | route.query | remote |
235+
| router.js:27:29:27:39 | route.query | remote |
230236
| router.js:32:9:32:16 | to.query | remote |
231237
| router.js:33:9:33:18 | from.query | remote |
232238
| router.js:38:5:38:12 | to.query | remote |

0 commit comments

Comments
 (0)