diff --git a/javascript/frameworks/ui5/lib/advanced_security/javascript/frameworks/ui5/RemoteFlowSources.qll b/javascript/frameworks/ui5/lib/advanced_security/javascript/frameworks/ui5/RemoteFlowSources.qll index 858697bf..a367d919 100644 --- a/javascript/frameworks/ui5/lib/advanced_security/javascript/frameworks/ui5/RemoteFlowSources.qll +++ b/javascript/frameworks/ui5/lib/advanced_security/javascript/frameworks/ui5/RemoteFlowSources.qll @@ -77,14 +77,16 @@ class ODataServiceModel extends UI5ExternalModel { ) or /* - * A constructor call to sap.ui.model.odata.v2.ODataModel. + * A constructor call to sap.ui.model.odata.v2.ODataModel or sap.ui.model.odata.v4.ODataModel. */ this instanceof NewNode and ( exists(RequiredObject oDataModel | oDataModel.asSourceNode().flowsTo(this.getCalleeNode()) and - oDataModel.getDependency() = "sap/ui/model/odata/v2/ODataModel" + oDataModel.getDependency() in [ + "sap/ui/model/odata/v2/ODataModel", "sap/ui/model/odata/v4/ODataModel" + ] ) or this.getCalleeName() = "ODataModel"