-
Notifications
You must be signed in to change notification settings - Fork 1.8k
JavaScript: Lower precision for a number of queries. #3510
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
Obviously, feel free to speak up if there are any queries in here that you think are worth keeping. Two of these queries have associated CWEs; we can keep them on the strength of that, but I think it would be a stretch to call them security queries. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Agree with the choice of queries, just a minor nit in the change note.
@@ -23,6 +23,29 @@ | |||
| Expression has no effect (`js/useless-expression`) | Less results | This query no longer flags an expression when that expression is the only content of the containing file. | | |||
| Unknown directive (`js/unknown-directive`) | Less results | This query no longer flags directives generated by the Babel compiler. | | |||
|
|||
The following low-precision queries are no longer run by default on LGTM (their results already were not displayed previously): |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Saying both "already" and "previously" seems a bit redundant.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I have removed "previously".
These queries are currently run by default, but don't have their results displayed. Looking through results on LGTM.com, they are either false positives (e.g., `BitwiseSignCheck` which flags many perfectly harmless operations and `CompareIdenticalValues` which mostly flags NaN checks) or harmless results that developers are unlikely to care about (e.g., `EmptyArrayInit` or `MisspelledIdentifier`). With this PR, the only queries that are still run but not displayed are security queries, where different considerations may apply.
f691429
to
a803120
Compare
@esbena, can I get a re-approval? |
These queries are currently run by default, but don't have their results displayed.
Looking through results on LGTM.com, they are either false positives (e.g.,
BitwiseSignCheck
which flags many perfectly harmless operations andCompareIdenticalValues
which mostly flags NaN checks) or harmless results that developers are unlikely to care about (e.g.,EmptyArrayInit
orMisspelledIdentifier
).With this PR, the only queries that are still run but not displayed are security queries, where different considerations may apply.