Giter Site home page Giter Site logo

Comments (4)

lionello avatar lionello commented on May 20, 2024 2

Same here, got triggered on a .exec().

from eslint-plugin-security.

lionello avatar lionello commented on May 20, 2024

https://github.com/nodesecurity/eslint-plugin-security/blob/b72890b2b97245cf40a10a6ddb13918aad57790c/rules/detect-child-process.js#L22

This line causes the #31 for me because it ended up adding undefined to the names array. Changing the line to check for a valid name fixes this:

                 var args = node.arguments[0];
                 if (args && args.type === 'Literal' && args.value === 'child_process') {
-                    if (node.parent.type === 'VariableDeclarator') {
+                    if (node.parent.type === 'VariableDeclarator' && node.parent.id.name) {
                         names.push(node.parent.id.name);
                     } else if (node.parent.type === 'AssignmentExpression' && node.parent.operator === '=') {

from eslint-plugin-security.

sergio-domingues avatar sergio-domingues commented on May 20, 2024

any updates on this ?

from eslint-plugin-security.

ota-meshi avatar ota-meshi commented on May 20, 2024

I checked past source code and this is the same issue as #69. That's fixed in #97.
So I will close this issue.

from eslint-plugin-security.

Related Issues (20)

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.