Module RegexInjectionQuery
Provides a taint-tracking configuration for reasoning about untrusted user input used to construct regular expressions.
Import path
import semmle.code.csharp.security.dataflow.RegexInjectionQuery
Imports
csharp | The default C# QL library. |
Classes
RegexEscapeSanitizer | A call to |
RegexObjectCreationSink | A |
RemoteSource | DEPRECATED: Use |
Sanitizer | A sanitizer for untrusted user input used to construct regular expressions. |
Sink | A data flow sink for untrusted user input used to construct regular expressions. |
Source | A data flow source for untrusted user input used to construct regular expressions. |
ThreatModelSource | A source supported by the current threat model. |
Aliases
RegexInjection | A taint-tracking module for untrusted user input used to construct regular expressions. |