CodeQL library for Go
codeql/go-all 0.7.15-dev (changelog, source)
Search

Module LogInjection

Provides extension points for customizing the data-flow tracking configuration for reasoning about log injection.

Import path

import semmle.go.security.LogInjectionCustomizations

Classes

LoggerSink

An argument to a logging mechanism.

ReplaceSanitizer

An expression that is equivalent to strings.ReplaceAll(s, old, new), where old is a newline character, considered as a sanitizer for log injection.

Sanitizer

A sanitizer for log injection vulnerabilities.

Sink

A data flow sink for log injection vulnerabilities.

Source

A data flow source for log injection vulnerabilities.

UntrustedFlowAsSource

DEPRECATED: Use RemoteFlowSource or Source instead.