github / github/codeql

LGTM.com - false positive for SolidJS's `ref` attribute

Abierto
#9,792 3 comentarios 0 reacciones 0 asignados Ver en GitHub
false-positive JS not security
Lenguaje dominante
CodeQL
Estrellas
10.1k
Forks
2.1k
Merge medio
2 d 15 h
PR fusionados (30 d)
141

Descripción

**Description of the false positive**

SolidJS has a `ref` attribute which assigns the element to a variable, see https://www.solidjs.com/docs/latest/api#ref.

I don't think that's simple to support because it is a non-standard extension to JavaScript language.

**URL to the alert on the project page on LGTM.com**

https://lgtm.com/projects/g/pastebinrun/pastebinrun/snapshot/95688ef349b2f4c1f75c116216706d05846da2b3/files/js/views/TextAreaEditor/index.tsx?sort=name&dir=ASC&mode=heatmap#x1dce09b117a9e254:1

Guía de contribución

Abrir la guía de contribución

Evaluación

Este issue todavía no se ha evaluado.

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.