diff --git a/javascript/frameworks/ui5/lib/advanced_security/javascript/frameworks/ui5/UI5View.qll b/javascript/frameworks/ui5/lib/advanced_security/javascript/frameworks/ui5/UI5View.qll index b7b57c7dc..0dd0f7bd9 100644 --- a/javascript/frameworks/ui5/lib/advanced_security/javascript/frameworks/ui5/UI5View.qll +++ b/javascript/frameworks/ui5/lib/advanced_security/javascript/frameworks/ui5/UI5View.qll @@ -920,6 +920,7 @@ class UI5Handler extends FunctionNode { /** * Models controller references in event handlers as types */ +overlay[local?] class ControlTypeInHandlerModel extends ModelInput::TypeModel { override DataFlow::CallNode getASource(string type) { // oEvent.getSource() is of the type of the Control calling the handler diff --git a/javascript/frameworks/xsjs/lib/advanced_security/javascript/frameworks/xsjs/AsyncXSJS.qll b/javascript/frameworks/xsjs/lib/advanced_security/javascript/frameworks/xsjs/AsyncXSJS.qll index 4d62fb403..2132d3bae 100644 --- a/javascript/frameworks/xsjs/lib/advanced_security/javascript/frameworks/xsjs/AsyncXSJS.qll +++ b/javascript/frameworks/xsjs/lib/advanced_security/javascript/frameworks/xsjs/AsyncXSJS.qll @@ -14,6 +14,7 @@ class XSJSDollarNamespace extends GlobalVarRefNode { /** * `TypeModel` for `XSJSDollarNamespace`. */ +overlay[local?] class XSJSDollarTypeModel extends ModelInput::TypeModel { override DataFlow::Node getASource(string type) { type = "XsjsDollar" and