mirror of
https://github.com/github/codeql.git
synced 2025-12-18 01:33:15 +01:00
7dd65d8ac6
These are Unit types and so should be kept private as you can't use them for anything other than getting all taint steps of a certain type. Also factors out accesses to 'this'.
23 lines
689 B
Plaintext
23 lines
689 B
Plaintext
import javascript
|
|
import semmle.javascript.security.dataflow.Xss
|
|
|
|
query predicate component_getAPropertyValue(Vue::Component c, string name, DataFlow::Node prop) {
|
|
c.getAPropertyValue(name) = prop
|
|
}
|
|
|
|
query predicate component_getOption(Vue::Component c, string name, DataFlow::Node prop) {
|
|
c.getOption(name) = prop
|
|
}
|
|
|
|
query predicate component(Vue::Component c) { any() }
|
|
|
|
query predicate viewComponentStep(DataFlow::Node pred, DataFlow::Node succ) {
|
|
TaintTracking::viewComponentStep(pred, succ)
|
|
}
|
|
|
|
query predicate templateElement(Vue::Template::Element template) { any() }
|
|
|
|
query predicate xssSink(DomBasedXss::Sink s) { any() }
|
|
|
|
query RemoteFlowSource remoteFlowSource() { any() }
|