Update javascript/ql/lib/semmle/javascript/security/dataflow/XssThroughDomCustomizations.qll

bananabr · erik-krogh · web-flow · commit d52980573a64 · 2022-05-03T11:37:26.000-05:00
Co-authored-by: Erik Krogh Kristensen &lt;erik-krogh@github.com&gt;
diff --git a/javascript/ql/lib/semmle/javascript/security/dataflow/XssThroughDomCustomizations.qll b/javascript/ql/lib/semmle/javascript/security/dataflow/XssThroughDomCustomizations.qll
@@ -226,6 +226,8 @@ module XssThroughDom {
     t.start() and
     exists(DataFlow::CallNode call |
       call = DataFlow::globalVarRef("getSelection").getACall()
+      or
+      call = DOM::documentRef().getAMemberCall("getSelection")
     |
       result = call
     )

Original file line number	Diff line number	Diff line change
`@@ -226,6 +226,8 @@ module XssThroughDom {`
`226`	`226`	`t.start() and`
`227`	`227`	`exists(DataFlow::CallNode call \|`
`228`	`228`	`call = DataFlow::globalVarRef("getSelection").getACall()`
	`229`	`+ or`
	`230`	`+ call = DOM::documentRef().getAMemberCall("getSelection")`
`229`	`231`	`\|`
`230`	`232`	`result = call`
`231`	`233`	`)`