Module CommandInjection

Provides a taint tracking configuration for reasoning about command injection vulnerabilities.

Import path

import semmle.go.security.CommandInjection

Provides extension points for customizing the taint tracking configuration for reasoning about command injection vulnerabilities.

Configuration	DEPRECATED: Use `Flow` instead.
DoubleDashSanitizingConfiguration	DEPRECATED: Use `DoubleDashSanitizingFlow` instead.

DoubleDashSanitizingFlow	Tracks taint flow for reasoning about command-injection vulnerabilities with sinks which are sanitized by `--`.
Flow	Tracks taint flow for reasoning about command-injection vulnerabilities with sinks which are not sanitized by `--`.