How do we use the NestJS framework classes?
- 主要语言
- CodeQL
- 星标
- 10.1k
- 派生
- 2.1k
- 平均合并
- 2 天 15 小时
- 30 天内合并 PR
- 141
描述
The [NestJS framework classes](https://github.com/github/codeql/blob/main/javascript/ql/lib/semmle/javascript/frameworks/Nest.qll) such as `NestJSRouteHandler` and `NestJSRequestInput` are private within the `NestJS` module. Other framework classes (e.g. NextJS) are public, allowing them to be used in custom queries. Is this an oversight, or is there another way to consume those classes?
贡献指南
调研方向
Start with semmle/javascript/frameworks/Nest.qll and inspect the private NestJSRouteHandler and NestJSRequestInput classes, then compare how the public NextJS framework classes are exposed. Done means determining whether the visibility is intentional and documenting or identifying the supported way to consume these classes.
由索引模型根据 Issue 内容生成。
评估
- 技术栈
- javascript
- 领域
- security
- Issue 类型
- 文档
- 难度
- 4/5
- 预计耗时
- 3-5 天
- 活跃度
- 停滞
- 描述清晰度
- 需要澄清
- 新手友好度
- 25/100