step 9

Author: xcorail

courses/javascript/unsafe-jquery/answers/sources.ql

@@ -0,0 +1,12 @@
+import javascript
+
+predicate isSource(DataFlow::Node source) {
+    exists(DataFlow::FunctionNode plugin |
+      plugin = jquery().getAPropertyRead("fn").getAPropertySource() and
+      source = plugin.getLastParameter()
+    )
+}
+
+from DataFlow::Node node
+where isSource(node)
+select node

courses/javascript/unsafe-jquery/image/config/config.json

@@ -7,6 +7,7 @@
     "dollar-arg-node.ql": "dollar-arg-node.csv",
     "property-read.ql": "property-read.csv",
     "jquery-plugins.ql": "jquery-plugins.csv",
-    "plugin-options.ql": "plugin-options.csv"
+    "plugin-options.ql": "plugin-options.csv",
+    "sources.ql": "sources.csv"
   }
 }

courses/javascript/unsafe-jquery/image/config/sources.csv

@@ -0,0 +1,13 @@
+"node","URL for node"
+"option","file:///opt/src/js/affix.js:119:19:119:24"
+"option","file:///opt/src/js/alert.js:64:19:64:24"
+"option","file:///opt/src/js/button.js:78:19:78:24"
+"option","file:///opt/src/js/carousel.js:176:19:176:24"
+"option","file:///opt/src/js/collapse.js:170:19:170:24"
+"option","file:///opt/src/js/dropdown.js:130:19:130:24"
+"_relatedTarget","file:///opt/src/js/modal.js:292:27:292:40"
+"option","file:///opt/src/js/popover.js:82:19:82:24"
+"option","file:///opt/src/js/scrollspy.js:136:19:136:24"
+"option","file:///opt/src/js/tab.js:118:19:118:24"
+"option","file:///opt/src/js/tooltip.js:494:19:494:24"
+"duration","file:///opt/src/js/transition.js:36:41:36:48"