Make the TaintTracking::Configuration s extend the default configurations again

Author: jeongsoolee09

javascript/frameworks/cap/lib/advanced_security/javascript/frameworks/cap/CAPLogInjectionQuery.qll

@@ -43,13 +43,11 @@ class CdsLogSink extends DataFlow::Node {
   }
 }
 
-class CAPLogInjectionConfiguration extends TaintTracking::Configuration {
+class CAPLogInjectionConfiguration extends LogInjectionConfiguration {
   CAPLogInjectionConfiguration() { this = "CAP Log Injection" }
 
   override predicate isSource(DataFlow::Node start) {
-    exists(LogInjectionConfiguration logInjectionConfiguration |
-      logInjectionConfiguration.isSource(start)
-    )
+    super.isSource(start)
     or
     start instanceof RemoteFlowSource
   }

javascript/frameworks/ui5/lib/advanced_security/javascript/frameworks/ui5/UI5XssQuery.qll

@@ -3,13 +3,11 @@ import advanced_security.javascript.frameworks.ui5.dataflow.DataFlow as UI5DataF
 import advanced_security.javascript.frameworks.ui5.UI5View
 import semmle.javascript.security.dataflow.DomBasedXssQuery as DomBasedXss
 
-class Configuration extends TaintTracking::Configuration {
+class Configuration extends DomBasedXss::Configuration {
   Configuration() { this = "UI5 HTML Injection" }
 
   override predicate isSource(DataFlow::Node start) {
-    exists(DomBasedXss::Configuration domBasedXssConfiguration |
-      domBasedXssConfiguration.isSource(start)
-    )
+    super.isSource(start)
     or
     start instanceof RemoteFlowSource
   }
@@ -19,9 +17,7 @@ class Configuration extends TaintTracking::Configuration {
     DataFlow::FlowLabel outLabel
   ) {
     /* Already an additional flow step defined in `DomBasedXssQuery::Configuration` */
-    exists(DomBasedXss::Configuration domBasedXssConfiguration |
-      domBasedXssConfiguration.isAdditionalFlowStep(start, end, inLabel, outLabel)
-    )
+    super.isAdditionalFlowStep(start, end, inLabel, outLabel)
     or
     /* TODO: Legacy code */
     /* Handler argument node to handler parameter */
@@ -39,9 +35,7 @@ class Configuration extends TaintTracking::Configuration {
 
   override predicate isBarrier(DataFlow::Node node) {
     /* 1. Already a sanitizer defined in `DomBasedXssQuery::Configuration` */
-    exists(DomBasedXss::Configuration domBasedXssConfiguration |
-      domBasedXssConfiguration.isSanitizer(node)
-    )
+    super.isSanitizer(node)
     or
     /* 2. Value read from a non-string control property */
     exists(PropertyMetadata m | not m.isUnrestrictedStringType() | node = m)

javascript/frameworks/xsjs/lib/advanced_security/javascript/frameworks/xsjs/XSJSReflectedXssQuery.qll

@@ -13,13 +13,11 @@ class XSJSResponseSetBodyCall extends MethodCallNode {
   XSJSResponse getParentXSJSResponse() { result = response }
 }
 
-class Configuration extends TaintTracking::Configuration {
+class Configuration extends DomBasedXss::Configuration {
   Configuration() { this = "XSJS Reflected XSS Query" }
 
   override predicate isSource(DataFlow::Node start) {
-    exists(DomBasedXss::Configuration domBasedXssConfiguration |
-      domBasedXssConfiguration.isSource(start)
-    ) or
+    super.isSource(start) or
     start instanceof RemoteFlowSource
   }
 

javascript/frameworks/xsjs/lib/advanced_security/javascript/frameworks/xsjs/XSJSSqlInjectionQuery.qll

@@ -12,13 +12,12 @@ class XSJSDBConnectionPrepareStatementArgument extends DataFlow::ValueNode {
   predicate isConcatenated() { this.getAPredecessor+() instanceof StringOps::ConcatenationNode }
 }
 
-class Configuration extends TaintTracking::Configuration {
+class Configuration extends SqlInjection::Configuration {
   Configuration() { this = "XSJS SQL Injection Query" }
 
   override predicate isSource(DataFlow::Node start) {
-    exists(SqlInjection::Configuration sqlInjectionConfiguration |
-      sqlInjectionConfiguration.isSource(start)
-    ) or
+    super.isSource(start)
+    or
     start instanceof RemoteFlowSource
   }
 

javascript/frameworks/xsjs/lib/advanced_security/javascript/frameworks/xsjs/XSJSUrlRedirectQuery.qll

@@ -2,13 +2,12 @@ import javascript
 import advanced_security.javascript.frameworks.xsjs.AsyncXSJS
 import semmle.javascript.security.dataflow.ServerSideUrlRedirectQuery as UrlRedirect
 
-class Configuration extends TaintTracking::Configuration {
+class Configuration extends UrlRedirect::Configuration {
   Configuration() { this = "XSJS URL Redirect Query" }
 
   override predicate isSource(DataFlow::Node start) {
-    exists(UrlRedirect::Configuration urlRedirectConfiguration |
-      urlRedirectConfiguration.isSource(start)
-    ) or
+    super.isSource(start)
+    or
     start instanceof RemoteFlowSource
   }