Repository navigation
Expand file tree
/
Copy pathui5.model.yml
More file actions
226 lines (223 loc) · 16.1 KB
/
Copy pathui5.model.yml
File metadata and controls
226 lines (223 loc) · 16.1 KB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
extensions:
- addsTo:
pack: codeql/javascript-all
extensible: "typeModel"
data:
- ["SapUICoreInstance", "global", "Member[sap].Member[ui].Member[getCore].ReturnValue"]
- ["Control", "Control", "Instance"]
- ["Control", "sap/ui/core/Control", ""]
- ["Control", "UI5HTMLControl", ""]
- ["Control", "UI5InputControl", ""]
- ["Control", "CustomControl", ""]
- ["Control", "global", "Member[sap].Member[ui].Member[core].Member[Control]"]
- ["Controller", "Controller", "Instance"]
- ["Controller", "sap/ui/core/mvc/Controller", ""]
- ["UI5ElementModule", "sap/ui/core/Element", ""]
- ["Component", "sap/ui/core/mvc/Component", ""]
- ["Component", "sap/ui/core/UIComponent", ""]
- ["Renderer", "Control", "Member[extend].Argument[1].Member[renderer]"]
- ["Renderer", "sap/ui/core/RenderManager", "Member[extend].Argument[1].Member[renderer]"]
- ["Renderer", "sap/ui/core/Renderer", "Member[extend].Argument[1]"]
- ["RenderManager", "RenderManager", "Instance"]
- ["RenderManager", "sap/ui/core/RenderManager", ""]
- ["RenderManager", "Renderer", "Parameter[0]"]
- ["RenderManager", "Renderer", "Member[render].Parameter[0]"]
- ["Patcher", "Patcher", "Instance"]
- ["Patcher", "sap/ui/core/Patcher", ""]
- ["UI5HTMLControl", "UI5HTMLControl", "Instance"]
- ["UI5HTMLControl", "sap/ui/core/HTML", ""]
- ["UI5HTMLControl", "global", "Member[sap].Member[ui].Member[core].Member[HTML]"]
- ["Assert", "global", "Member[sap].Member[base].Member[assert]"]
- ["Assert", "global", "Member[jQuery].Member[sap].Member[assert]"]
- ["SapLogger", "sap/base/Log", ""]
- ["SapLogger", "global", "Member[sap].Member[base].Member[Log]"]
- ["SapLogger", "SapLogger", "Member[getLogger].ReturnValue"]
- ["SapLogger", "global", "Member[jQuery].Member[sap].Member[log]"]
- ["SapLogEntries", "SapLogger", "Member[addLogListener].Argument[0].Member[onLogEntry].Parameter[0]"]
- ["SapLogEntries", "SapLogger", "Member[getLogEntries].ReturnValue"]
- ["ResourceBundle", "ResourceBundle", "Instance"]
- ["ResourceBundle", "sap/base/i18n/ResourceBundle", ""]
- ["Properties", "Properties", "Instance"]
- ["Properties", "sap/base/util/Properties", ""]
- ["LoaderExtensions", "LoaderExtensions", "Instance"]
- ["LoaderExtensions", "sap/base/util/LoaderExtensions", ""]
- ["UI5URIParameters", "UI5URIParameters", "Instance"]
- ["UI5URIParameters", "sap/base/util/UriParameters", ""]
- ["UI5URIParameters", "UI5URIParameters", "Member[fromQuery].ReturnValue"]
- ["UI5URIParameters", "global", "Member[jQuery].Member[sap].Member[util].Member[UriParameters]"]
- ["UI5URIParameters", "global", "Member[jQuery].Member[sap].Member[getUriParameters].ReturnValue"]
- ["SapUIDom", "SapUIDom", "Instance"]
- ["SapUIDom", "sap/ui/dom", ""]
- ["SapUIDom", "global", "Member[sap].Member[ui].Member[dom]"]
# model Controls inheritance
- ["UI5InputControl", "UI5InputControl", "Instance"]
- ["UI5InputControl", "sap/m/InputBase", ""]
- ["UI5InputControl", "sap/m/Input", ""]
- ["UI5InputControl", "sap/ui/webc/main/Input", ""]
- ["UI5InputControl", "sap/ui/commons/TextField", ""]
- ["UI5InputControl", "sap/ui/commons/PasswordField", ""]
- ["UI5InputControl", "sap/ui/commons/ValueHelpField", ""]
- ["UI5InputControl", "sap/ui/commons/SearchField", ""]
- ["UI5InputControl", "sap/ui/commons/ComboBox", ""]
- ["UI5InputControl", "sap/ui/commons/TextArea", ""]
- ["UI5InputControl", "sap/ui/webc/main/TextArea", ""]
- ["UI5InputControl", "sap/m/ComboBoxTextField", ""]
- ["UI5InputControl", "sap/m/MaskEnabler", ""]
- ["UI5InputControl", "sap/m/MaskInput", ""]
- ["UI5InputControl", "sap/m/TextArea", ""]
- ["UI5InputControl", "sap/m/DatePicker", ""]
- ["UI5InputControl", "sap/m/ComboBoxBase", ""]
- ["UI5InputControl", "sap/m/MultiInput", ""]
- ["UI5InputControl", "sap/ui/webc/main/MultiInput", ""]
- ["UI5InputControl", "sap/m/SearchField", ""]
- ["UI5InputControl", "sap/m/FeedInput", ""]
- ["UI5InputControl", "sap/ui/richtexteditor/RichTextEditor", ""]
- ["UI5CodeEditor", "UI5CodeEditor", "Instance"]
- ["UI5CodeEditor", "sap/ui/codeeditor/CodeEditor", ""]
# Classes that provide Path injection APIs
- ["UI5ClientStorage", "sap/ui/util/Storage", ""]
- ["UI5ClientStorage", "global", "Member[sap].Member[ui].Member[util].Member[Storage]"]
- ["UI5ClientStorage", "global", "Member[jQuery].Member[sap].Member[storage]"]
- ["UI5ClientStorage", "sap/ui/core/util/File", ""]
- ["UI5ClientStorage", "global", "Member[sap].Member[ui].Member[core].Member[util].Member[File]"]
# Fragment API - byId returns a Control (models static Fragment.byId() calls)
- ["Fragment", "Fragment", "Instance"]
- ["Fragment", "sap/ui/core/Fragment", ""]
- ["UI5InputControl", "Fragment", "Member[byId].ReturnValue"]
# Publishing and Subscribing to Events
- ["UI5EventBusInstance", "sap/ui/core/EventBus", "Member[getInstance].ReturnValue"]
- ["UI5EventBusPublish", "UI5EventBusInstance", "Member[publish]"]
- ["UI5EventBusPublishedEventData", "UI5EventBusPublish", "Argument[2]"]
- ["UI5EventBusSubscribe", "UI5EventBusInstance", "Member[subscribe,subscribeOnce]"]
- ["UI5EventSubscriptionHandlerDataParameter", "UI5EventBusSubscribe", "Argument[2].Parameter[2]"]
- ["SapUICoreEventBusInstance", "SapUICoreInstance", "Member[getEventBus].ReturnValue"]
- ["SapUICoreEventBusPublish", "SapUICoreEventBusInstance", "Member[publish]"]
- ["SapUICoreEventBusPublishedEventData", "SapUICoreEventBusPublish", "Argument[2]"]
- ["SapUICoreEventBusSubscribe", "SapUICoreEventBusInstance", "Member[subscribe,subscribeOnce]"]
- ["SapUICoreEventSubscriptionHandlerDataParameter", "SapUICoreEventBusSubscribe", "Argument[2].Parameter[2]"]
# Extend Calls
- ["CustomControl", "Control", "Member[extend]"]
- ["CustomController", "Controller", "Member[extend]"]
- ["CustomControllerContent", "Controller", "Member[extend].Argument[1]"]
- ["CustomControllerGetOwnerComponent", "CustomControllerContent", "Fuzzy.Member[getOwnerComponent].ReturnValue"]
- ["CustomControllerGetOwnerComponentEventBus", "CustomControllerGetOwnerComponent", "Member[getEventBus].ReturnValue"]
- ["CustomControllerGetOwnerComponentEventBusPublish", "CustomControllerGetOwnerComponentEventBus", "Member[publish]"]
- ["CustomControllerGetOwnerComponentEventBusPublishedData", "CustomControllerGetOwnerComponentEventBusPublish", "Argument[2]"]
- ["CustomControllerGetOwnerComponentEventBusSubscribe", "CustomControllerGetOwnerComponentEventBus", "Member[subscribe,subscribeOnce]"]
- ["CustomControllerGetOwnerComponentEventBusSubscriptionHandlerDataParameter", "CustomControllerGetOwnerComponentEventBusSubscribe", "Argument[2].Parameter[2]"]
- ["CustomComponent", "Component", "Member[extend]"]
- ["CustomRenderer", "Renderer", "Member[extend]"]
# The UI5 loader adapter resolves module types by their dependency paths.
- ["UI5ControllerReference", "CustomControllerContent", "AnyMember.Parameter[this]"]
- ["ViewReference", "UI5ControllerReference", "Member[getView].ReturnValue"]
# Element#$ is inherited by controls and views; lookups share a single jQuery conversion.
- ["UI5ElementReference", "ViewReference", ""]
- ["UI5ElementReference", "UI5ControllerReference", "Member[byId].ReturnValue"]
- ["UI5ElementReference", "ViewReference", "Member[byId].ReturnValue"]
- ["UI5ElementReference", "SapUICoreInstance", "Member[byId].ReturnValue"]
- ["UI5ElementReference", "Fragment", "Member[byId].WithArity[2].ReturnValue"]
- ["UI5ElementReference", "UI5ElementModule", "Member[getElementById,closestTo].ReturnValue"]
- ["UI5ElementReference", "global", "Member[sap].Member[ui].Member[core].Member[Element].Member[getElementById,closestTo].ReturnValue"]
- ["UI5ElementReference", "global", "Member[sap].Member[ui].Member[core].Member[Fragment].Member[byId].WithArity[2].ReturnValue"]
- ["UI5ControlJQuery", "UI5ElementReference", "Member[$].WithArity[0..1].ReturnValue"]
- ["UI5ControlJQuery", "UI5ControlJQuery", "Member[add,addBack,addClass,after,append,appendTo,before,children,clone,closest,contents,detach,each,empty,end,eq,filter,find,first,has,hide,insertAfter,insertBefore,last,map,next,nextAll,nextUntil,not,parent,parents,parentsUntil,prepend,prependTo,prev,prevAll,prevUntil,remove,removeAttr,removeClass,removeProp,replaceAll,replaceWith,show,siblings,slice,toggle,toggleClass,wrap,wrapAll,wrapInner].ReturnValue"]
- ["UI5ControlJQuery", "UI5ControlJQuery", "Member[addAriaDescribedBy,addAriaLabelledBy,disableSelection,enableSelection,removeAriaDescribedBy,removeAriaLabelledBy,root,selectText].ReturnValue"]
# Getter overloads return strings, numbers, or objects rather than jQuery.
- ["UI5ControlJQuery", "UI5ControlJQuery", "Member[html,text,val,cursorPos,scrollLeftRTL,zIndex].WithArity[1..].ReturnValue"]
- ["UI5ControlJQuery", "UI5ControlJQuery", "Member[attr,prop,css].WithArity[2].ReturnValue"]
# One-argument object setters are guarded in UI5ModuleLoader because string arguments are getters.
- ["UI5ControlJQueryObjectSetterResult", "UI5ControlJQuery", "Member[attr,prop,css].WithArity[1].ReturnValue"]
# client-side data model types hierarchy
- ["UI5ClientDataModel", "UI5ClientDataModel", "Instance"]
- ["UI5ClientDataModel", "sap/ui/model/ClientModel", ""]
- ["UI5ClientDataModel", "UI5JSONDataModel", ""]
- ["UI5ClientDataModel", "UI5XMLDataModel", ""]
- ["UI5JSONDataModel", "UI5JSONDataModel", "Instance"]
- ["UI5JSONDataModel", "sap/ui/model/json/JSONModel", ""]
- ["UI5JSONDataModel", "global", "Member[sap].Member[ui].Member[model].Member[json].Member[JSONModel]"]
- ["UI5XMLDataModel", "UI5XMLDataModel", "Instance"]
- ["UI5XMLDataModel", "sap/ui/model/xml/XMLModel", ""]
- ["UI5XMLDataModel", "global", "Member[sap].Member[ui].Member[model].Member[xml].Member[XMLModel]"]
- addsTo:
pack: codeql/javascript-all
extensible: "sourceModel"
data:
- ["UI5InputControl", "Member[value]", "remote"]
- ["UI5InputControl", "Member[getValue].ReturnValue", "remote"]
- ["UI5CodeEditor", "Member[value]", "remote"]
- ["UI5CodeEditor", "Member[getCurrentValue].ReturnValue", "remote"]
- ["global", "Member[jQuery].Member[sap].Member[syncHead,syncGet,syncGetText,syncPost,syncPostText].ReturnValue", "remote"]
- ["UI5URIParameters", "Member[get].ReturnValue", "browser-url-query"]
- ["UI5URIParameters", "Member[getAll].ReturnValue", "browser-url-query"]
- addsTo:
pack: codeql/javascript-all
extensible: "sinkModel"
data:
# html-injection
- ["global", "Member[jQuery].Member[sap].Member[globalEval].Argument[0]", "ui5-html-injection"]
- ["UI5HTMLControl", "Argument[0].Member[content]", "ui5-html-injection"]
- ["UI5HTMLControl", "Member[content]", "ui5-html-injection"]
- ["UI5HTMLControl", "Member[setContent].Argument[0]", "ui5-html-injection"]
- ["sap/ui/richtexteditor/RichTextEditor", "Member[value]", "ui5-html-injection"]
- ["sap/ui/richtexteditor/RichTextEditor", "Member[setValue].Argument[0]", "ui5-html-injection"]
- ["Patcher", "Member[unsafeHtml].Argument[0..]", "ui5-html-injection"]
- ["RenderManager", "Member[write,unsafeHtml].Argument[0..]", "ui5-html-injection"]
- ["RenderManager", "Member[writeAttribute,addStyle].Argument[0..1]", "ui5-html-injection"]
- ["RenderManager", "Member[addClass].Argument[0]", "ui5-html-injection"]
- ["UI5ControlJQuery", "Member[html,replaceWith,wrap,wrapAll,wrapInner].Argument[0]", "html-injection"]
- ["UI5ControlJQuery", "Member[append,prepend,before,after].Argument[0..]", "html-injection"]
- ["UI5ControlJQuery", "Member[html,append,prepend,before,after,replaceWith,wrap,wrapAll,wrapInner].Argument[0].ReturnValue", "html-injection"]
# client-side URL redirection
- ["sap/m/ContentConfig", "Member[href]", "url-redirection"]
- ["sap/m/GenericTile", "Member[url]", "url-redirection"]
- ["sap/m/Link", "Member[href]", "url-redirection"]
- ["sap/m/LinkTileContent", "Member[linkHref]", "url-redirection"]
- ["sap/m/ObjectHeader", "Member[introHref]", "url-redirection"]
- ["sap/m/ObjectHeader", "Member[titleHref]", "url-redirection"]
- ["sap/m/P13nItem", "Member[href]", "url-redirection"]
- ["sap/m/QuickViewGroupElement", "Member[url]", "url-redirection"]
- ["sap/m/QuickViewPage", "Member[titleUrl]", "url-redirection"]
- ["sap/m/library", "Member[URLHelper].Member[redirect].Argument[0]", "url-redirection"]
- ["sap/f/cards/BaseHeader", "Member[href]", "url-redirection"]
- ["sap/tnt/NavigationListItem", "Member[href]", "url-redirection"]
# legacy client-side URL redirection
- ["sap/ui/commons/Area", "Member[href]", "url-redirection"]
- ["sap/ui/commons/Link", "Member[href]", "url-redirection"]
- ["sap/ui/ux3/NavigationItem", "Member[href]", "url-redirection"]
# client-side request forgery
- ["sap/m/Avatar", "Member[src]", "request-forgery"]
- ["sap/m/Image", "Member[src]", "request-forgery"]
- ["sap/m/LightBoxItem", "Member[imageSrc]", "request-forgery"]
- ["sap/m/PDFViewer", "Member[source]", "request-forgery"]
- ["sap/ui/core/ComponentContainer", "Member[url]", "request-forgery"]
# log-injection
- ["Assert", "Argument[1]", "ui5-log-injection"]
- ["SapLogger", "Member[debug,error,fatal,info,trace,warning].Argument[0..2]", "ui5-log-injection"]
# path-injection
- ["global", "Member[jQuery].Member[sap].Member[registerModulePath,registerResourcePath].Argument[1]", "ui5-path-injection"]
- ["global", "Member[jQuery].Member[sap].Member[require,includeScript,includeStyleSheet,properties,resources,sjax,syncHead].Argument[0]", "ui5-path-injection"]
- ["SapUIDom", "Member[includeScript,includeStyleSheet].Argument[0]", "ui5-path-injection"]
- ["global", "Member[jQuery].Member[sap].Member[syncGet,syncPost,syncGetText,syncGetJSON].Argument[0..1]", "ui5-path-injection"]
- ["ResourceBundle", "Member[create].Argument[0]", "ui5-path-injection"]
- ["Properties", "Member[create].Argument[0]", "ui5-path-injection"]
- ["LoaderExtensions", "Member[registerResourcePath].Argument[1]", "ui5-path-injection"]
- ["UI5ClientStorage", "Member[put].Argument[0]", "ui5-path-injection"]
- ["UI5ClientStorage", "Member[save].Argument[1]", "ui5-path-injection"]
- addsTo:
pack: codeql/javascript-all
extensible: "summaryModel"
data:
- ["sap/base/strings/camelize", "", "Argument[0]", "ReturnValue", "taint"]
- ["sap/base/strings/capitalize", "", "Argument[0]", "ReturnValue", "taint"]
- ["sap/base/strings/escapeRegExp", "", "Argument[0]", "ReturnValue", "taint"]
- ["sap/base/strings/formatMessage", "", "Argument[0]", "ReturnValue", "taint"]
- ["sap/base/strings/hyphenate", "", "Argument[0]", "ReturnValue", "taint"]
- ["global", "Member[jQuery].Member[sap].Member[charToUpperCase,padLeft,padRight,camelCase,hyphen,escapeRegExp,encodeHTML,encodeXML,encodeJS,encodeURL,encodeURLParameters,encodeCSS]", "Argument[0]", "ReturnValue", "taint"]
- ["global", "Member[jQuery].Member[sap].Member[formatMessage]", "Argument[0..]", "ReturnValue", "taint"]
- ["sap/base/security/encodeCSS", "", "Argument[0]", "ReturnValue", "taint"]
- ["sap/base/security/encodeJS", "", "Argument[0]", "ReturnValue", "taint"]
- ["sap/base/security/encodeURL", "", "Argument[0]", "ReturnValue", "taint"]
- ["sap/base/security/encodeURLParameters", "", "Argument[0]", "ReturnValue", "taint"]
- ["sap/base/security/encodeXML", "", "Argument[0]", "ReturnValue", "taint"]
- ["UI5HTMLControl", "", "Argument[0].Member[content]", "ReturnValue.Member[content]", "taint"]
- ["UI5HTMLControl", "Instance.Member[getContent]", "Argument[this].Member[content]", "ReturnValue", "taint"]