JS: introduce ReactComponent::getStaticMethod

Author: Esben Sparre Andreasen

javascript/ql/src/semmle/javascript/frameworks/React.qll

@@ -34,6 +34,11 @@ abstract class ReactComponent extends ASTNode {
    */
   abstract Function getInstanceMethod(string name);
 
+  /**
+   * Gets a static method of this component with the given name.
+   */
+  abstract Function getStaticMethod(string name);
+
   /**
    * Gets the abstract value that represents this component.
    */
@@ -272,6 +277,10 @@ class FunctionalComponent extends ReactComponent, Function {
     name = "render" and result = this
   }
 
+  override Function getStaticMethod(string name) {
+    none()
+  }
+
   override DataFlow::SourceNode getADirectPropsAccess() {
     result = DataFlow::parameterNode(getParameter(0))
   }
@@ -302,6 +311,14 @@ private abstract class SharedReactPreactClassComponent extends ReactComponent, C
     result = ClassDefinition.super.getInstanceMethod(name)
   }
 
+  override Function getStaticMethod(string name) {
+    exists(MethodDeclaration decl |
+      decl = getMethod(name) and
+      decl.isStatic() and
+      result = decl.getBody()
+    )
+  }
+
   override DataFlow::SourceNode getADirectPropsAccess() {
     result.(DataFlow::PropRef).accesses(ref(), "props") or
     result = DataFlow::parameterNode(getConstructor().getBody().getParameter(0))
@@ -428,6 +445,10 @@ class ES5Component extends ReactComponent, ObjectExpr {
     result = getPropertyByName(name).getInit()
   }
 
+  override Function getStaticMethod(string name) {
+    none()
+  }
+
   override DataFlow::SourceNode getADirectPropsAccess() {
     result.(DataFlow::PropRef).accesses(ref(), "props")
   }