False positive: js/prototype-pollution-utility
Open
false-positive
- Dominant language
- CodeQL
- Stars
- 10.1k
- Forks
- 2.1k
- Avg merge
- 2d 15h
- Merged PRs (30d)
- 141
Description
Hello, I'm getting a CodeQL alert for a Prototype-polluting function.
There is a guard in place (highlighted in image below):
Source code is here: https://github.com/mui/material-ui/blob/v4.x/packages/material-ui-utils/src/deepmerge.js#L10
Contributor guide
Assessment
This issue has not been assessed yet.