File tree Expand file tree Collapse file tree 1 file changed +8
-8
lines changed
javascript/ql/lib/semmle/javascript/security/dataflow Expand file tree Collapse file tree 1 file changed +8
-8
lines changed Original file line number Diff line number Diff line change @@ -316,7 +316,7 @@ module CodeInjection {
316
316
* A value interpreted as code by the `webix` library.
317
317
*/
318
318
class WebixExec extends Sink {
319
- WebixExec ( ) { this = DataFlow :: moduleImport ( "webix" ) .getAMemberCall ( "exec" ) .getArgument ( 0 ) }
319
+ WebixExec ( ) { this = API :: moduleImport ( "webix" ) .getMember ( "exec" ) .getParameter ( 0 ) . asSink ( ) }
320
320
}
321
321
322
322
/** A sink for code injection via template injection. */
@@ -431,15 +431,15 @@ module CodeInjection {
431
431
*/
432
432
class WebixTemplateSink extends TemplateSink {
433
433
WebixTemplateSink ( ) {
434
- this = DataFlow :: moduleImport ( "webix" ) .getAMemberCall ( "ui" ) .getOptionArgument ( 0 , "template" )
434
+ this = API :: moduleImport ( "webix" ) .getMember ( "ui" ) .getParameter ( 0 ) . getMember ( "template" ) . asSink ( )
435
435
or
436
436
this .asExpr ( ) =
437
- DataFlow :: moduleImport ( "webix" )
438
- .getAMemberCall ( "ui" )
439
- .getOptionArgument ( 0 , "template" )
440
- .asExpr ( )
441
- .( Function )
442
- .getAReturnedExpr ( )
437
+ API :: moduleImport ( "webix" )
438
+ .getMember ( "ui" )
439
+ .getParameter ( 0 )
440
+ .getMember ( "template" )
441
+ .getReturn ( )
442
+ .asSink ( )
443
443
}
444
444
}
445
445
You can’t perform that action at this time.
0 commit comments