For other CodeQL resources, including tutorials and examples, see the CodeQL documentation

XPathInjectionQuery

Module XPathInjectionQuery

Provides a taint-tracking configuration for reasoning about untrusted user input used in XPath expression.


                                import semmle.code.csharp.security.dataflow.XPathInjectionQuery

The default C# QL library.

RemoteSource	A source of remote user input.
Sanitizer	A sanitizer for untrusted user input used in XPath expression.
Sink	A data flow sink for untrusted user input used in XPath expression.
Source	A data flow source for untrusted user input used in XPath expression.
TaintTrackingConfiguration	DEPRECATED: Use `XpathInjection` instead.
XPathExpressionCompileSink	The `xpath` argument to an `XPathExpression.Compile(..)` call.
XmlNavigatorSink	The `xpath` argument to an `XPathNavigator` call.
XmlNodeSink	The `xpath` argument to an `XmlNode.SelectNode(..)` call.

A taint-tracking configuration for untrusted user input used in XPath expression.

A taint-tracking module for untrusted user input used in XPath expression.