Use of call stack introspection in strict mode — CodeQL query help documentation CodeQL docs

CodeQL resources

Use of call stack introspection in strict mode¶

ID: js/strict-mode-call-stack-introspection
Kind: problem
Security severity: 
Severity: error
Precision: high
Tags:
   - quality
   - reliability
   - correctness
   - language-features
Query suites:
   - javascript-code-quality.qls
   - javascript-security-and-quality.qls

Click to see the query in the CodeQL repository

The properties callee and caller of arguments objects as well as the properties caller and arguments of function objects are not available in strict-mode code, and any attempt to access them will result in a runtime error.

Recommendation¶

Instead of using arguments.callee, you can refer to the enclosing function by its name (possibly giving it a name first if it is an anonymous function expression). Uses of the other properties can often be eliminated by refactoring the program.

Example¶

In the following example, arguments.callee is used to recursively invoke the enclosing function, which is anonymous.

var o = {
  A: function(x) {
       'use strict';
       if (!(this instanceof arguments.callee))
         return new arguments.callee(x);
       this.x = x;
     }
};

To avoid this use, the function can be given a name and referred to using that name:

var o = {
  A: function A(x) {
       'use strict';
       if (!(this instanceof A))
         return new A(x);
       this.x = x;
     }
};

References¶

Mozilla Developer Network: arguments.

© GitHub, Inc.
Terms
Privacy