JavaScript: Add new tests for recognising receiver of event handler as DOM element.

javascript/ql/test/query-tests/Security/CWE-079/DomBasedXss/ConsistencyDomBasedXss.expected

@@ -0,0 +1 @@
+| query-tests/Security/CWE-079/DomBasedXss/event-handler-receiver.js:2 | expected an alert, but found none | NOT OK |  |

javascript/ql/test/query-tests/Security/CWE-079/DomBasedXss/event-handler-receiver.js

@@ -0,0 +1,3 @@
+document.getElementById('my-id').onclick = function() {
+  this.parentNode.innerHTML = '<h2><a href="' + location.href + '">A link</a></h2>'; // NOT OK
+};