Predicate PropertyInjection::isPrototypeLessObject
Holds if the node
is of form Object.create(null)
and so it has no prototype.
Import path
import semmle.javascript.security.dataflow.PropertyInjectionShared
predicate isPrototypeLessObject(MethodCallNode node)