Module SqlInjectionQuery
Provides a taint-tracking configuration for reasoning about SQL injection vulnerabilities.
Import path
import semmle.code.csharp.security.dataflow.SqlInjectionQuery
Imports
| csharp |
The default C# QL library. |
Classes
| LocalSource |
A source of local user input. |
| RemoteSource |
A source of remote user input. |
| Sanitizer |
A sanitizer for SQL injection vulnerabilities. |
| Sink |
A sink for SQL injection vulnerabilities. |
| Source |
A source specific to SQL injection vulnerabilities. |
| SqlInjectionExprSink |
An SQL expression passed to an API call that executes SQL. |
| TaintTrackingConfiguration |
DEPRECATED: Use |
Modules
| SqlInjectionConfig |
A taint-tracking configuration for SQL injection vulnerabilities. |
Aliases
| SqlInjection |
A taint-tracking module for SQL injection vulnerabilities. |