github / github/codeql

LGTM.com - false positive for SolidJS's `ref` attribute

Open
#9,792 3 comments 0 reactions 0 assignees View on GitHub
false-positive JS not security
Dominant language
CodeQL
Stars
10.1k
Forks
2.1k
Avg merge
2d 15h
Merged PRs (30d)
141

Description

**Description of the false positive**

SolidJS has a `ref` attribute which assigns the element to a variable, see https://www.solidjs.com/docs/latest/api#ref.

I don't think that's simple to support because it is a non-standard extension to JavaScript language.

**URL to the alert on the project page on LGTM.com**

https://lgtm.com/projects/g/pastebinrun/pastebinrun/snapshot/95688ef349b2f4c1f75c116216706d05846da2b3/files/js/views/TextAreaEditor/index.tsx?sort=name&dir=ASC&mode=heatmap#x1dce09b117a9e254:1

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.