CodeQL library for JavaScript/TypeScript
codeql/javascript-all 2.2.1-dev (changelog, source)
Search

Predicate dynamicPropReadStep

Holds if output is the result of base[key], either directly or through one or more function calls, ignoring reads that can’t access the prototype chain.

Import path

import semmle.javascript.DynamicPropertyAccess
predicate dynamicPropReadStep(Node base, Node key, SourceNode output)