github / github/codeql

LGTM.com - false positive: JS type of `console.log` variable incorrectly detected

未關閉
#2,666 0 則留言 0 個 reaction 已指派 0 人 在 GitHub 檢視
false-positive JS
主要語言
CodeQL
星號
10.1k
分支
2.1k
平均合併
2 天 15 小時
30 天內合併 PR
141

描述

**Description of the false positive**

The variable is defined with `var originalLog = console.log;`. `typeof console.log` is `function` or `object` (an exotic implementation object that is callable) depending on the browser.

The warning says it has type "boolean, date, number, object, regular expression or string" - there's a few problems with this:
1. Dates and RegExps are *not* a type in JS (and if they are, Arrays, Maps, Sets, Promises, etc are too)
1. this is also missing `symbol` and `bigint`
1. Given the possible exotic type of `console.log` as `object` - a callable object - this is not actually a valid warning.

**URL to the alert on the project page on LGTM.com**

https://lgtm.com/projects/g/substack/testling/snapshot/8d454f8d81bb0e84b06879a4506e530b8bdc87ac/files/browser/prelude.js?sort=name&dir=ASC&mode=heatmap#x1b735cba61dcb9a1:1

貢獻指南

開啟貢獻指南

評估

這個 Issue 還沒有評估資料。

把新 issue 寄到你的電子郵件信箱

精選適合新手參與的 GitHub issue 摘要。