JavaScript: Model webContents property.

Author: Max Schaefer

javascript/ql/src/semmle/javascript/frameworks/Electron.qll

@@ -65,6 +65,15 @@ module Electron {
     }
   }
 
+  /**
+   * A reference to the `webContents` property of a browser object.
+   */
+  class WebContents extends DataFlow::SourceNode {
+    WebContents() {
+      this.(DataFlow::PropRead).accesses(any(BrowserObject bo), "webContents")
+    }
+  }
+
   /**
    * A Node.js-style HTTP or HTTPS request made using an Electron module.
    */

javascript/ql/test/library-tests/frameworks/Electron/BrowserObject.expected

@@ -12,3 +12,5 @@
 | electron.js:40:5:40:6 | bv |
 | electron.ts:3:12:3:13 | bw |
 | electron.ts:3:40:3:41 | bv |
+| electron.ts:4:3:4:4 | bw |
+| electron.ts:5:3:5:4 | bv |

javascript/ql/test/library-tests/frameworks/Electron/electron.js

@@ -36,5 +36,5 @@ function foo(x) {
     return x;
 }
 
-foo(bw);
-foo(bv);
+foo(bw).webContents;
+foo(bv).webContents;

javascript/ql/test/library-tests/frameworks/Electron/electron.ts

@@ -1,4 +1,6 @@
 ///<reference path="./electron.d.ts"/>
 
 function f(bw: Electron.BrowserWindow, bv: Electron.BrowserView) {
+  bw.webContents;
+  bv.webContents;
 }