recognize types of the form "HTML%Element" as dom values

erik-krogh · erik-krogh · commit 3983aceb48da · 2021-09-13T20:43:31.000+02:00
diff --git a/javascript/ql/lib/semmle/javascript/DOM.qll b/javascript/ql/lib/semmle/javascript/DOM.qll
@@ -450,6 +450,8 @@ module DOM {
     result = domValueRef(DataFlow::TypeTracker::end())
     or
     result.hasUnderlyingType("Element")
+    or
+    result.hasUnderlyingType(any(string s | s.matches("HTML%Element")))
   }
 
   module LocationSource {

Original file line number	Diff line number	Diff line change
`@@ -450,6 +450,8 @@ module DOM {`
`450`	`450`	`result = domValueRef(DataFlow::TypeTracker::end())`
`451`	`451`	`or`
`452`	`452`	`result.hasUnderlyingType("Element")`
	`453`	`+ or`
	`454`	`+ result.hasUnderlyingType(any(string s \| s.matches("HTML%Element")))`
`453`	`455`	`}`
`454`	`456`
`455`	`457`	`module LocationSource {`