Skip to content

Commit 5419072

Browse files
authored
Update UI5View.qll
1 parent 445841a commit 5419072

File tree

1 file changed

+8
-8
lines changed
  • javascript/frameworks/ui5/lib/advanced_security/javascript/frameworks/ui5

1 file changed

+8
-8
lines changed

javascript/frameworks/ui5/lib/advanced_security/javascript/frameworks/ui5/UI5View.qll

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -329,7 +329,7 @@ class JsView extends UI5View {
329329
exists(DataFlow::ObjectLiteralNode control, string type, string path, string property |
330330
this = control.getFile() and
331331
type = result.getControlTypeName() and
332-
ApiGraphModelsExtensions::sourceModel(getASuperType(type), path, "remote", _) and
332+
ApiGraphModelsExtensions::sourceModel(getASuperType(type), path, "remote") and
333333
property = path.replaceAll(" ", "").regexpCapture("Member\\[([^\\]]+)\\]", 1) and
334334
result.getBinding().getBindingTarget().asDataFlowNode() = control.getAPropertyWrite(property)
335335
)
@@ -339,7 +339,7 @@ class JsView extends UI5View {
339339
exists(DataFlow::ObjectLiteralNode control, string type, string path, string property |
340340
this = control.getFile() and
341341
type = result.getControlTypeName() and
342-
ApiGraphModelsExtensions::sinkModel(getASuperType(type), path, "ui5-html-injection", _) and
342+
ApiGraphModelsExtensions::sinkModel(getASuperType(type), path, "ui5-html-injection") and
343343
property = path.replaceAll(" ", "").regexpCapture("Member\\[([^\\]]+)\\]", 1) and
344344
result.getBinding().getBindingTarget().asDataFlowNode() = control.getAPropertyWrite(property)
345345
)
@@ -382,7 +382,7 @@ class JsonView extends UI5View {
382382
exists(JsonObject control, string type, string path, string property |
383383
root = control.getParent+() and
384384
type = result.getControlTypeName() and
385-
ApiGraphModelsExtensions::sourceModel(getASuperType(type), path, "remote", _) and
385+
ApiGraphModelsExtensions::sourceModel(getASuperType(type), path, "remote") and
386386
property = path.replaceAll(" ", "").regexpCapture("Member\\[([^\\]]+)\\]", 1) and
387387
result.getBindingTarget() = control
388388
)
@@ -392,7 +392,7 @@ class JsonView extends UI5View {
392392
exists(JsonObject control, string type, string path, string property |
393393
root = control.getParent+() and
394394
type = result.getControlTypeName() and
395-
ApiGraphModelsExtensions::sinkModel(getASuperType(type), path, "ui5-html-injection", _) and
395+
ApiGraphModelsExtensions::sinkModel(getASuperType(type), path, "ui5-html-injection") and
396396
property = path.replaceAll(" ", "").regexpCapture("Member\\[([^\\]]+)\\]", 1) and
397397
result.getBindingTarget() = control
398398
)
@@ -533,7 +533,7 @@ class HtmlView extends UI5View, HTML::HtmlFile {
533533
exists(HTML::Element control, string type, string path, string property |
534534
this = control.getFile() and
535535
type = result.getControlTypeName() and
536-
ApiGraphModelsExtensions::sourceModel(getASuperType(type), path, "remote", _) and
536+
ApiGraphModelsExtensions::sourceModel(getASuperType(type), path, "remote") and
537537
property = path.replaceAll(" ", "").regexpCapture("Member\\[([^\\]]+)\\]", 1) and
538538
result.getBindingTarget() = control.getAttributeByName("data-" + property)
539539
)
@@ -543,7 +543,7 @@ class HtmlView extends UI5View, HTML::HtmlFile {
543543
exists(HTML::Element control, string type, string path, string property |
544544
this = control.getFile() and
545545
type = result.getControlTypeName() and
546-
ApiGraphModelsExtensions::sinkModel(getASuperType(type), path, "ui5-html-injection", _) and
546+
ApiGraphModelsExtensions::sinkModel(getASuperType(type), path, "ui5-html-injection") and
547547
property = path.replaceAll(" ", "").regexpCapture("Member\\[([^\\]]+)\\]", 1) and
548548
result.getBindingTarget() = control.getAttributeByName("data-" + property)
549549
)
@@ -659,7 +659,7 @@ class XmlView extends UI5View instanceof XmlFile {
659659
exists(XmlElement control, string type, string path, string property |
660660
this = control.getFile() and
661661
type = result.getControlTypeName() and
662-
ApiGraphModelsExtensions::sourceModel(getASuperType(type), path, "remote", _) and
662+
ApiGraphModelsExtensions::sourceModel(getASuperType(type), path, "remote") and
663663
property = path.replaceAll(" ", "").regexpCapture("Member\\[([^\\]]+)\\]", 1) and
664664
result.getBindingTarget() = control.getAttribute(property)
665665
)
@@ -669,7 +669,7 @@ class XmlView extends UI5View instanceof XmlFile {
669669
exists(XmlElement control, string type, string path, string property |
670670
this = control.getFile() and
671671
type = result.getControlTypeName() and
672-
ApiGraphModelsExtensions::sinkModel(getASuperType(type), path, "ui5-html-injection", _) and
672+
ApiGraphModelsExtensions::sinkModel(getASuperType(type), path, "ui5-html-injection") and
673673
property = path.replaceAll(" ", "").regexpCapture("Member\\[([^\\]]+)\\]", 1) and
674674
result.getBindingTarget() = control.getAttribute(property) and
675675
/* If the control is an `sap.ui.core.HTML` then the control should be missing the `sanitizeContent` attribute */

0 commit comments

Comments
 (0)