github / github/codeql

How do we use the NestJS framework classes?

Open
#21,233 1 comment 0 reactions 0 assignees View on GitHub
question
Dominant language
CodeQL
Stars
10.1k
Forks
2.1k
Avg merge
2d 15h
Merged PRs (30d)
141

Description

The [NestJS framework classes](https://github.com/github/codeql/blob/main/javascript/ql/lib/semmle/javascript/frameworks/Nest.qll) such as `NestJSRouteHandler` and `NestJSRequestInput` are private within the `NestJS` module. Other framework classes (e.g. NextJS) are public, allowing them to be used in custom queries. Is this an oversight, or is there another way to consume those classes?

Contributor guide

Open the contributing guide

Research direction

Start with semmle/javascript/frameworks/Nest.qll and inspect the private NestJSRouteHandler and NestJSRequestInput classes, then compare how the public NextJS framework classes are exposed. Done means determining whether the visibility is intentional and documenting or identifying the supported way to consume these classes.

Written by the indexing model from the issue text.

Assessment

Tech stack
javascript
Domain
security
Issue type
Documentation
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.