Add an XSS example that uses sap/ui/core/EventBus

Author: jeongsoolee09

javascript/frameworks/ui5/test/queries/UI5Xss/xss-eventbus-with-data/UI5Xss.expected

@@ -0,0 +1,46 @@
+nodes
+| webapp/controller/app.controller.js:8:26:8:50 | this.ge ... Model() |
+| webapp/controller/app.controller.js:9:17:9:21 | input |
+| webapp/controller/app.controller.js:9:25:9:52 | oModel. ... input') |
+| webapp/controller/app.controller.js:10:44:10:48 | input |
+| webapp/controller/app.controller.js:18:17:18:27 | sInputValue |
+| webapp/controller/app.controller.js:18:31:18:59 | oEvent. ... Value() |
+| webapp/controller/app.controller.js:19:44:19:54 | sInputValue |
+| webapp/controller/app.controller.js:26:17:26:21 | value |
+| webapp/controller/app.controller.js:26:25:26:41 | oInput.getValue() |
+| webapp/controller/app.controller.js:27:36:27:40 | value |
+| webapp/controller/app.controller.js:31:17:31:27 | input: null |
+| webapp/controller/app.controller.js:32:17:32:29 | output1: null |
+| webapp/controller/app.controller.js:34:17:34:29 | output3: null |
+| webapp/view/app.view.xml:5:5:7:28 | value={/input} |
+| webapp/view/app.view.xml:9:5:9:39 | content={/output1} |
+| webapp/view/app.view.xml:12:5:12:39 | content={/output2} |
+| webapp/view/app.view.xml:17:5:17:39 | content={/output3} |
+edges
+| webapp/controller/app.controller.js:8:26:8:50 | this.ge ... Model() | webapp/controller/app.controller.js:9:25:9:52 | oModel. ... input') |
+| webapp/controller/app.controller.js:9:17:9:21 | input | webapp/controller/app.controller.js:10:44:10:48 | input |
+| webapp/controller/app.controller.js:9:25:9:52 | oModel. ... input') | webapp/controller/app.controller.js:9:17:9:21 | input |
+| webapp/controller/app.controller.js:10:44:10:48 | input | webapp/controller/app.controller.js:8:26:8:50 | this.ge ... Model() |
+| webapp/controller/app.controller.js:10:44:10:48 | input | webapp/controller/app.controller.js:32:17:32:29 | output1: null |
+| webapp/controller/app.controller.js:18:17:18:27 | sInputValue | webapp/controller/app.controller.js:19:44:19:54 | sInputValue |
+| webapp/controller/app.controller.js:18:31:18:59 | oEvent. ... Value() | webapp/controller/app.controller.js:18:17:18:27 | sInputValue |
+| webapp/controller/app.controller.js:19:44:19:54 | sInputValue | webapp/controller/app.controller.js:34:17:34:29 | output3: null |
+| webapp/controller/app.controller.js:26:17:26:21 | value | webapp/controller/app.controller.js:27:36:27:40 | value |
+| webapp/controller/app.controller.js:26:25:26:41 | oInput.getValue() | webapp/controller/app.controller.js:26:17:26:21 | value |
+| webapp/controller/app.controller.js:31:17:31:27 | input: null | webapp/controller/app.controller.js:9:25:9:52 | oModel. ... input') |
+| webapp/controller/app.controller.js:31:17:31:27 | input: null | webapp/view/app.view.xml:5:5:7:28 | value={/input} |
+| webapp/controller/app.controller.js:32:17:32:29 | output1: null | webapp/view/app.view.xml:9:5:9:39 | content={/output1} |
+| webapp/controller/app.controller.js:33:17:33:29 | output2: null | webapp/view/app.view.xml:12:5:12:39 | content={/output2} |
+| webapp/controller/app.controller.js:34:17:34:29 | output3: null | webapp/view/app.view.xml:17:5:17:39 | content={/output3} |
+| webapp/controller/app.controller.js:36:26:36:45 | new JSONModel(oData) | webapp/view/app.view.xml:9:5:9:39 | content={/output1} |
+| webapp/controller/app.controller.js:36:26:36:45 | new JSONModel(oData) | webapp/view/app.view.xml:12:5:12:39 | content={/output2} |
+| webapp/controller/app.controller.js:36:26:36:45 | new JSONModel(oData) | webapp/view/app.view.xml:17:5:17:39 | content={/output3} |
+| webapp/view/app.view.xml:5:5:7:28 | value={/input} | webapp/controller/app.controller.js:31:17:31:27 | input: null |
+| webapp/view/app.view.xml:5:5:7:28 | value={/input} | webapp/controller/app.controller.js:36:26:36:45 | new JSONModel(oData) |
+| webapp/view/app.view.xml:9:5:9:39 | content={/output1} | webapp/controller/app.controller.js:32:17:32:29 | output1: null |
+| webapp/view/app.view.xml:12:5:12:39 | content={/output2} | webapp/controller/app.controller.js:33:17:33:29 | output2: null |
+| webapp/view/app.view.xml:17:5:17:39 | content={/output3} | webapp/controller/app.controller.js:34:17:34:29 | output3: null |
+#select
+| webapp/controller/app.controller.js:27:36:27:40 | value | webapp/controller/app.controller.js:26:25:26:41 | oInput.getValue() | webapp/controller/app.controller.js:27:36:27:40 | value | XSS vulnerability due to $@. | webapp/controller/app.controller.js:26:25:26:41 | oInput.getValue() | user-provided value |
+| webapp/view/app.view.xml:9:5:9:39 | content={/output1} | webapp/view/app.view.xml:5:5:7:28 | value={/input} | webapp/view/app.view.xml:9:5:9:39 | content={/output1} | XSS vulnerability due to $@. | webapp/view/app.view.xml:5:5:7:28 | value={/input} | user-provided value |
+| webapp/view/app.view.xml:17:5:17:39 | content={/output3} | webapp/controller/app.controller.js:18:31:18:59 | oEvent. ... Value() | webapp/view/app.view.xml:17:5:17:39 | content={/output3} | XSS vulnerability due to $@. | webapp/controller/app.controller.js:18:31:18:59 | oEvent. ... Value() | user-provided value |

javascript/frameworks/ui5/test/queries/UI5Xss/xss-eventbus-with-data/UI5Xss.qlref

@@ -0,0 +1 @@
+UI5Xss/UI5Xss.ql