recognize types of the form "HTML%Element" as dom values

2026-04-30 11:15:13 +02:00 · 2021-09-01 09:31:48 +02:00
parent bac80bf686
commit 3983aceb48
1 changed files with 2 additions and 0 deletions
--- a/javascript/ql/lib/semmle/javascript/DOM.qll
+++ b/javascript/ql/lib/semmle/javascript/DOM.qll
@@ -450,6 +450,8 @@ module DOM {
    result = domValueRef(DataFlow::TypeTracker::end())
    or
    result.hasUnderlyingType("Element")
+    or
+    result.hasUnderlyingType(any(string s | s.matches("HTML%Element")))
  }

  module LocationSource {