JS: Check property name in NodeJSModule.getABulkExportedNode

asgerf · asgerf · commit 7daa6481e375 · 2021-09-01T13:25:14.000+02:00
diff --git a/javascript/ql/lib/semmle/javascript/NodeJS.qll b/javascript/ql/lib/semmle/javascript/NodeJS.qll
@@ -102,6 +102,7 @@ class NodeModule extends Module {
   override DataFlow::Node getABulkExportedNode() {
     exists(DataFlow::PropWrite write |
       write.getBase().asExpr() = getModuleVariable().getAnAccess() and
+      write.getPropertyName() = "exports" and
       result = write.getRhs()
     )
   }

Original file line number	Diff line number	Diff line change
`@@ -102,6 +102,7 @@ class NodeModule extends Module {`
`102`	`102`	`override DataFlow::Node getABulkExportedNode() {`
`103`	`103`	`exists(DataFlow::PropWrite write \|`
`104`	`104`	`write.getBase().asExpr() = getModuleVariable().getAnAccess() and`
	`105`	`+ write.getPropertyName() = "exports" and`
`105`	`106`	`result = write.getRhs()`
`106`	`107`	`)`
`107`	`108`	`}`