Module FlowSources

Provides classes and predicates for working with Android components.

Provides classes and predicates related to org.apache.http.* and org.apache.hc.*.

Provides classes for performing local (intra-procedural) and global (inter-procedural) data flow analyses.

Provides classes and predicates for def-use and use-use pairs. Built on top of the SSA library for maximal precision.

Provides definitions for working with uses of Android external storage

Provides classes and predicates for working with the Guice framework.

Provides classes and predicates for working with JavaServer Faces renderer.

Definitions relating to JAX-WS (Java/Jakarta API for XML Web Services) and JAX-RS (Java/Jakarta API for RESTful Web Services).

Provides classes and predicates for working with the Java JDBC API.

Definitions related to java.net.*.

Provides a remote flow source for Android’s Activity.onActivityResult method.

Provides classes and predicates for working with the Play framework.

Definitions related to java.util.Properties.

Remote Method Invocation.

Provides classes and predicates for working with the Java Servlet API.

Provides classes for working with Spring web requests.

Provides classes for working with Spring web clients.

Provides classes for performing local (intra-procedural) and global (inter-procedural) taint-tracking analyses.

Provides classes and predicates for working with the Apache Thrift framework.

Provides classes for identifying methods called by the Java SE WebSocket package.

Provides all default Java QL imports.

A parameter of an entry-point method declared in a ContentProvider class.

Android Intent that may have come from a hostile application.

A parameter of a method annotated with the android.webkit.JavascriptInterface annotation.

A node with input from a database.

A node with input from the local environment, such as files, standard in, environment variables, and main method parameters.

A method that reads from the environment, such as System.getProperty or System.getenv.

A parameter of an entry-point method declared in an exported ContentProvider class.

Exported Android Intent that may have come from a hostile application.

A node with input that may be controlled by a local user.

The data Intent parameter in the onActivityResult method in an Activity or Fragment that calls startActivityForResult with an implicit Intent.

A data flow source of remote user input.

A reverse DNS method.

The type java.net.InetAddress.

Class for tainted user input.

DEPRECATED: Alias for ReverseDnsMethod