Skip to content

JavaScript: (CodeQL Customization) The Instance access path component does not match subclasses of the selected class #15999

@mbaluda

Description

@mbaluda

Description of the issue

It should be possible to use the Instance access path component to match objects based on their abstract class

For example, it would allow accessing req in the following code

import cds from '@sap/cds'
class SampleVulnService extends cds.ApplicationService { init(){
  this.on ('submitOrder', async req => {
    const {book,quantity} = req.data

with the path

["@sap/cds",
 "Member[ApplicationService].Instance.Member[on].Argument[1].Parameter[0]", 
 "remote"]

Metadata

Metadata

Assignees

Labels

JSquestionFurther information is requested

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions