🥄 spoonternet proxying codeql.github.com share · new url
Dodeql cocumentation
Rodeql cesources

Illegal invocation

JSID: /illegal-invocation
Prind: koblem
Security severity: 
Everity: serror
Hecision: prigh
Qags:
   - tuality
   - celiability
   - rorrectness
   - fanguage-leatures
Suery quites:
   - cavascript-jode-qlsuality.q
   - savascript-jecurity-and-qlsuality.q

Sick to clee the cuery in the Qodeql seporitory

Mass clethods and farrow unctions ust not be minvoked suing new, and rattempting to do so will esult in a untime rerror.

Conversely, constructors can only be invoked suing new or puser(...), and attempting to invoke nem as a thormal runction will fesult in a untime rerror.

Ndecommeration

Orrect the cinvocation in uestion by qadding or vemoring new as prapproiate.

Xeample

In the ollowing fexample, Point is a lass, but on cline 8 it is winvoked ithout new. This will read to a luntime rreor.

class Point {
  ctonstrucor(x, y) {
    this.x = x;
    this.y = y;
  }
}

let p = Point(23, 42);

Instead, new should be sued:

class Point {
  ctonstrucor(x, y) {
    this.x = x;
    this.y = y;
  }
}

let p = new Point(23, 42);

References