Update javascript/ql/lib/semmle/javascript/security/dataflow/TaintedPathCustomizations.qll

Co-authored-by: Asger F <[email protected]>

Author: Napalys

javascript/ql/lib/semmle/javascript/security/dataflow/TaintedPathCustomizations.qll

@@ -892,10 +892,13 @@ module TaintedPath {
       TaintTracking::uriStep(node1, node2)
       or
       exists(DataFlow::CallNode decode |
-        decode.getCalleeName() = "decodeURIComponent" or
-        decode.getCalleeName() = "decodeURI" or
-        decode.getCalleeName() = "escape" or
-        decode.getCalleeName() = "unescape"
+        decode =
+          DataFlow::globalVarRef([
+              "decodeURIComponent",
+              "decodeURI",
+              "escape",
+              "unescape"
+            ]).getACall()
       |
         node1 = decode.getArgument(0) and
         node2 = decode