File tree Expand file tree Collapse file tree 1 file changed +8
-8
lines changed
javascript/ql/lib/semmle/javascript/security/dataflow Expand file tree Collapse file tree 1 file changed +8
-8
lines changed Original file line number Diff line number Diff line change @@ -316,7 +316,7 @@ module CodeInjection {
316316 * A value interpreted as code by the `webix` library.
317317 */
318318 class WebixExec extends Sink {
319- WebixExec ( ) { this = DataFlow :: moduleImport ( "webix" ) .getAMemberCall ( "exec" ) .getArgument ( 0 ) }
319+ WebixExec ( ) { this = API :: moduleImport ( "webix" ) .getMember ( "exec" ) .getParameter ( 0 ) . asSink ( ) }
320320 }
321321
322322 /** A sink for code injection via template injection. */
@@ -431,15 +431,15 @@ module CodeInjection {
431431 */
432432 class WebixTemplateSink extends TemplateSink {
433433 WebixTemplateSink ( ) {
434- this = DataFlow :: moduleImport ( "webix" ) .getAMemberCall ( "ui" ) .getOptionArgument ( 0 , "template" )
434+ this = API :: moduleImport ( "webix" ) .getMember ( "ui" ) .getParameter ( 0 ) . getMember ( "template" ) . asSink ( )
435435 or
436436 this .asExpr ( ) =
437- DataFlow :: moduleImport ( "webix" )
438- .getAMemberCall ( "ui" )
439- .getOptionArgument ( 0 , "template" )
440- .asExpr ( )
441- .( Function )
442- .getAReturnedExpr ( )
437+ API :: moduleImport ( "webix" )
438+ .getMember ( "ui" )
439+ .getParameter ( 0 )
440+ .getMember ( "template" )
441+ .getReturn ( )
442+ .asSink ( )
443443 }
444444 }
445445
You can’t perform that action at this time.
0 commit comments