Javascript cannot query specific getAMemberCall

[ttttmr]

Here is the sample code

let ele = document.createElement("div");
ele.addEventListener("click", (e) => {
  const params = {};
  for (const name of ele.getAttributeNames()) {
    params[name] = ele.getAttribute(name);
  }
});
document.documentElement.appendChild(ele);

Here is the query code

import javascript
import DataFlow::PathGraph

from DataFlow::SourceNode e
where e = DOM::documentRef().getAMemberCall("createElement")
select e

Can query ele, but try to query ele.getAttribute will not work

import javascript
import DataFlow::PathGraph

from DataFlow::SourceNode e
where e = DOM::documentRef().getAMemberCall("createElement")
select e,e.getAMemberCall("getAttribute")

[erik-krogh]

I suspect it's because you're writing your code in the global scope.

Try to move you code inside a function, and see if that works. E.g:

function test() {
  let ele = document.createElement("div");
  ele.addEventListener("click", (e) => {
    const params = {};
    for (const name of ele.getAttributeNames()) {
      params[name] = ele.getAttribute(name);
    }
  });
  document.documentElement.appendChild(ele);
}

Our analysis of global variables is intentionally limited, because there is a large risk of the analysis blowing up.

[ttttmr]

@erik-krogh Thank you very much, you are right