JS: Restrict getAContextInput

asgerf · asgerf · commit 6ab7846e8195 · 2020-10-30T09:28:06.000Z
diff --git a/javascript/ql/src/semmle/javascript/frameworks/React.qll b/javascript/ql/src/semmle/javascript/frameworks/React.qll
@@ -632,6 +632,7 @@ private DataFlow::SourceNode getAContextRef(DataFlow::CallNode createContext) {
  */
 pragma[nomagic]
 private DataFlow::Node getAContextInput(DataFlow::CallNode createContext) {
+  createContext = react().getAMemberCall("createContext") and
   result = createContext.getArgument(0) // initial value
   or
   exists(JSXElement provider |
