Fix bug in UI5ControlHandlerParameter

jeongsoolee09 · jeongsoolee09 · commit 904b1fe94de4 · 2025-12-15T12:21:54.000-05:00
diff --git a/javascript/frameworks/ui5/lib/advanced_security/javascript/frameworks/ui5/RemoteFlowSources.qll b/javascript/frameworks/ui5/lib/advanced_security/javascript/frameworks/ui5/RemoteFlowSources.qll
@@ -27,7 +27,7 @@ private class UI5ControlHandlerParameter extends RemoteFlowSource {
       typeModel(typeAlias, sourceControl.getImportPath(), _) and
       sourceModel(typeAlias, _, "remote", _) and
       handler.getControl() = sourceControl and
-      this = handler.getParameter(0).getAMemberCall("getSource")
+      this = handler.getParameter(0).getAMemberCall("getSource").getAMemberCall("getValue")
     )
   }
 

Original file line number	Diff line number	Diff line change
`@@ -27,7 +27,7 @@ private class UI5ControlHandlerParameter extends RemoteFlowSource {`
`27`	`27`	`typeModel(typeAlias, sourceControl.getImportPath(), _) and`
`28`	`28`	`sourceModel(typeAlias, _, "remote", _) and`
`29`	`29`	`handler.getControl() = sourceControl and`
`30`		`- this = handler.getParameter(0).getAMemberCall("getSource")`
	`30`	`+ this = handler.getParameter(0).getAMemberCall("getSource").getAMemberCall("getValue")`
`31`	`31`	`)`
`32`	`32`	`}`
`33`	`33`