An element, viewed as a node in a data flow graph. Either an expression, a parameter, or an implicit varargs array creation.
Import path
import semmle.code.java.dataflow.DataFlow
Direct supertypes
Known direct subtypes
- AndroidContentProviderInput
- AndroidIntentInput
- CleartextStorageSanitizer
- CleartextStorageSink
- CommandInjectionSanitizer
- CommandInjectionSink
- ContentUriResolutionSanitizer
- ContentUriResolutionSink
- ExplicitIntentSanitizer
- ExprNode
- ExternalApiDataNode
- ExternalApkSource
- FieldValueNode
- FragmentInjectionSink
- HeaderSplittingSink
- ImplicitInstanceAccess
- ImplicitPendingIntentSink
- ImplicitPendingIntentSource
- ImplicitVarargsArray
- InformationLeakSink
- InsecureBasicAuthSink
- InsecureBasicAuthSource
- InsecureLdapUrlSink
- InsecureTrustManagerSink
- InsecureTrustManagerSource
- InstanceAccessNode
- InsufficientKeySizeSink
- InsufficientKeySizeSource
- IntentRedirectionSanitizer
- IntentRedirectionSink
- IntentUriPermissionManipulationSanitizer
- IntentUriPermissionManipulationSink
- JndiInjectionSanitizer
- JndiInjectionSink
- JwtParserWithInsecureParseSink
- JwtParserWithInsecureParseSource
- LdapInjectionSanitizer
- LdapInjectionSink
- LogInjectionSanitizer
- LogInjectionSink
- MvelEvaluationSink
- MvelInjectionSanitizer
- MyBatisInjectionSink
- OgnlInjectionSink
- OnActivityResultIncomingIntent
- ParameterNode
- PathInjectionSanitizer
- PolynomialRedosSink
- PostUpdateNode
- QueryInjectionSink
- RemoteFlowSource
- RequestForgerySanitizer
- RequestForgerySink
- SafeHeaderSplittingSource
- SslConnectionCreation
- SslConnectionInit
- SslUnsafeCertTrustSanitizer
- TemplateInjectionSanitizer
- TemplateInjectionSanitizerWithState
- TemplateInjectionSink
- TemplateInjectionSource
- UrlOpenSink
- UrlRedirectSink
- UrlResourceSink
- UserInput
- XPathInjectionSink
- XsltInjectionSink
- XssSanitizer
- XssSink
- XxeSanitizer
- XxeSink
Predicates
| asExpr |
Gets the expression corresponding to this node, if any. |
| asParameter |
Gets the parameter corresponding to this node, if any. |
| getEnclosingCallable |
Gets the callable in which this node occurs. |
| getLocation |
Gets the source location for this element. |
| getType |
Gets the type of this node. |
| getTypeBound |
Gets an upper bound on the type of this node. |
| hasLocationInfo |
Holds if this element is at the specified location. The location spans column |
| toString |
Gets a textual representation of this element. |