@@ -347,7 +347,7 @@ module DomBasedXss {
347
347
/**
348
348
* A write to the `template` option of a Vue instance, viewed as an XSS sink.
349
349
*/
350
- class VueTemplateSink extends DomBasedXss :: Sink {
350
+ class VueTemplateSink extends Sink {
351
351
VueTemplateSink ( ) {
352
352
// Note: don't use Vue::Component#getTemplate as it includes an unwanted getALocalSource() step
353
353
this = any ( Vue:: Component c ) .getOption ( "template" )
@@ -358,7 +358,7 @@ module DomBasedXss {
358
358
* The tag name argument to the `createElement` parameter of the
359
359
* `render` method of a Vue instance, viewed as an XSS sink.
360
360
*/
361
- class VueCreateElementSink extends DomBasedXss :: Sink {
361
+ class VueCreateElementSink extends Sink {
362
362
VueCreateElementSink ( ) {
363
363
exists ( Vue:: Component c , DataFlow:: FunctionNode f |
364
364
f .flowsTo ( c .getRender ( ) ) and
@@ -370,12 +370,12 @@ module DomBasedXss {
370
370
/**
371
371
* A Vue `v-html` attribute, viewed as an XSS sink.
372
372
*/
373
- class VHtmlSink extends Vue:: VHtmlAttribute , DomBasedXss :: Sink { }
373
+ class VHtmlSink extends Vue:: VHtmlAttribute , Sink { }
374
374
375
375
/**
376
376
* A raw interpolation tag in a template file, viewed as an XSS sink.
377
377
*/
378
- class TemplateSink extends DomBasedXss :: Sink {
378
+ class TemplateSink extends Sink {
379
379
TemplateSink ( ) {
380
380
exists ( Templating:: TemplatePlaceholderTag tag |
381
381
tag .isRawInterpolation ( ) and
@@ -388,7 +388,7 @@ module DomBasedXss {
388
388
* A value being piped into the `safe` pipe in a template file,
389
389
* disabling subsequent HTML escaping.
390
390
*/
391
- class SafePipe extends DomBasedXss :: Sink {
391
+ class SafePipe extends Sink {
392
392
SafePipe ( ) { this = Templating:: getAPipeCall ( "safe" ) .getArgument ( 0 ) }
393
393
}
394
394
0 commit comments