Skip to content

v0.124.2 — CodeQL: the inpaint provider through a Map

v0.124.1 closed #89, but #110 stayed open: CodeQL still read the inpaint provider's lookup as a property read named by the request, whatever the guards around it. The grant holders' alert (#166) closed in v0.122.1 only once their table became a Map.

  • [x] js/unvalidated-dynamic-method-call (#110): the inpaint provider is looked up in a Map built from the provider table.
    • Note: inpaintProviderFor reads PROVIDER_FILLS.get(id) (a ReadonlyMap from INPAINT_PROVIDERS); an unknown name, __proto__ or constructor has no entry and is refused, as before.