hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-23 07:45:17 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix WebixTemplateSink

Browse Source
This commit is contained in:
jorgectf
2023-06-26 13:32:00 +02:00
parent 5bd044211e
commit bb67a9000e
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
javascript/ql/lib/semmle/javascript/security/dataflow/CodeInjectionCustomizations.qll
View File

@@ -431,9 +431,10 @@ module CodeInjection {
*/
class WebixTemplateSink extends TemplateSink {
WebixTemplateSink() {
this = API::moduleImport("webix").getMember("ui").getParameter(0).getMember("template").asSink()
this =
API::moduleImport("webix").getMember("ui").getParameter(0).getMember("template").asSink()
or
this.asExpr() =
this =
API::moduleImport("webix")
.getMember("ui")
.getParameter(0)