JS: Recognize DomSanitizer from @angular/core

asgerf · asgerf · commit ff1d0cc4c7fc · 2021-01-18T10:54:27.000Z
diff --git a/javascript/ql/src/semmle/javascript/frameworks/Angular2.qll b/javascript/ql/src/semmle/javascript/frameworks/Angular2.qll
@@ -120,7 +120,7 @@ module Angular2 {
 
   /** Gets a reference to a `DomSanitizer` object. */
   DataFlow::SourceNode domSanitizer() {
-    result.hasUnderlyingType("@angular/platform-browser", "DomSanitizer")
+    result.hasUnderlyingType(["@angular/platform-browser", "@angular/core"], "DomSanitizer")
   }
 
   /** A value that is about to be promoted to a trusted HTML or CSS value. */

Original file line number	Diff line number	Diff line change
`@@ -120,7 +120,7 @@ module Angular2 {`
`120`	`120`
`121`	`121`	/** Gets a reference to a `DomSanitizer` object. */
`122`	`122`	`DataFlow::SourceNode domSanitizer() {`
`123`		`- result.hasUnderlyingType("@angular/platform-browser", "DomSanitizer")`
	`123`	`+ result.hasUnderlyingType(["@angular/platform-browser", "@angular/core"], "DomSanitizer")`
`124`	`124`	`}`
`125`	`125`
`126`	`126`	`/** A value that is about to be promoted to a trusted HTML or CSS value. */`