Merge pull request #104 from advanced-security/jeongsoolee09/cover-missing-xss

Cover missing XSS vulnerability

Author: jeongsoolee09

javascript/frameworks/ui5/ext/qlpack.yml

@@ -1,7 +1,7 @@
 ---
 library: true
 name: advanced-security/javascript-sap-ui5-models
-version: 0.5.0
+version: 0.6.0
 extensionTargets:
   codeql/javascript-all: "^0.8.7"
 dataExtensions:

javascript/frameworks/ui5/lib/advanced_security/javascript/frameworks/ui5/RemoteFlowSources.qll

@@ -123,6 +123,18 @@ private class RouteParameterAccess extends RemoteFlowSource instanceof PropRead
   }
 }
 
+private class DisplayEventHandlerParameterAccess extends RemoteFlowSource instanceof PropRead {
+  override string getSourceType() { result = "DisplayEventHandlerParameterAccess" }
+
+  DisplayEventHandlerParameterAccess() {
+    exists(DisplayEventHandler handler, MethodCallNode getParameterCall |
+      getParameterCall.getMethodName() = "getParameter" and
+      this.getBase().getALocalSource() = getParameterCall and
+      handler.getParameter(0) = getParameterCall.getReceiver().getALocalSource()
+    )
+  }
+}
+
 /**
  * Method calls that fetch a piece of data either from a library control capable of accepting user input, or from a URI parameter.
  */