github / github/codeql

LGTM.com - false positive for SolidJS's `ref` attribute

未关闭
#9,792 3 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看
false-positive JS not security
主要语言
CodeQL
星标
10.1k
派生
2.1k
平均合并
2 天 15 小时
30 天内合并 PR
141

描述

**Description of the false positive**

SolidJS has a `ref` attribute which assigns the element to a variable, see https://www.solidjs.com/docs/latest/api#ref.

I don't think that's simple to support because it is a non-standard extension to JavaScript language.

**URL to the alert on the project page on LGTM.com**

https://lgtm.com/projects/g/pastebinrun/pastebinrun/snapshot/95688ef349b2f4c1f75c116216706d05846da2b3/files/js/views/TextAreaEditor/index.tsx?sort=name&dir=ASC&mode=heatmap#x1dce09b117a9e254:1

贡献指南

打开贡献指南

评估

这个 Issue 还没有评估数据。

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。