Примеры ошибок, обнаруженных с помощью диагностики V7010

V7010. The return value of the function is required to be utilized.

Visual Studio Code

V7010 [CWE-252] The return value of function 'join' is required to be utilized. scmAccessibilityHelp.ts 108

....
if (focusedRepository) {
  ....
  // Resource Groups
  const resourceGroups: string[] = [];
  for (const resourceGroup of focusedRepository.provider.groups) {
    resourceGroups.push(
      `${resourceGroup.label} (${resourceGroup.resources.length} resource(s))`);
  }

  focusedRepository.provider.groups.map(g => g.label).join(', ');         // <=
  content.push(
            localize(
              'state-msg6',
              "Resource groups: {0}", resourceGroups.join(', ')));
}
....

Overleaf

V7010. The return value of function 'replace' is required to be utilized. sanitize.js 14

/**
 * Sanitize a translation string to prevent injection attacks
 *
 * @param {string} input
 * @returns {string}
 */
function sanitize(input) {
  // Block Angular XSS
  // Ticket: https://github.com/overleaf/issues/issues/4478
  input = input.replace(/'/g, ''')
  // Use left quote where (likely) appropriate.
  input.replace(/ '/g, ' '')                       // <=
  ....
}