An element, viewed as a node in a data flow graph. Either an expression, a parameter, or an implicit varargs array creation.
Import path
import semmle.code.java.dataflow.DataFlowDirect supertypes
Known direct subtypes
- ActiveThreatModelSource
- AdditionalNode
- AndroidContentProviderInput
- AndroidIntentInput
- ApiSinkNode
- ApiSourceNode
- CleartextStorageSanitizer
- CleartextStorageSink
- CommandInjectionSanitizer
- CommandInjectionSink
- ContentUriResolutionSanitizer
- CredentialsSinkNode
- EnvInput
- ExecTaintedEnvironmentSanitizer
- ExplicitIntentSanitizer
- ExprNode
- ExternalApiDataNode
- FieldValueNode
- FragmentInjectionSink
- HeaderSplittingSink
- ImplicitInstanceAccess
- ImplicitPendingIntentSink
- ImplicitVarargsArray
- InformationLeakSink
- InsecureBasicAuthSource
- InsecureRandomnessSink
- InsecureRandomnessSource
- InstanceAccessNode
- InsufficientKeySizeSink
- InsufficientKeySizeSource
- IntentRedirectionSanitizer
- IntentRedirectionSink
- IntentUriPermissionManipulationSanitizer
- JndiInjectionSanitizer
- LdapInjectionSanitizer
- LdapInjectionSink
- LogInjectionSanitizer
- LogInjectionSink
- MvelEvaluationSink
- MvelInjectionSanitizer
- MyBatisInjectionSink
- OnActivityResultIncomingIntent
- ParameterNode
- PathInjectionSanitizer
- PolynomialRedosSink
- PostUpdateNode
- RequestForgerySanitizer
- RequestForgerySink
- SafeHeaderSplittingSource
- SensitiveLoggerSource
- SimpleTypeSanitizer
- SourceNode
- SslConnectionCreation
- SslConnectionInit
- SslUnsafeCertTrustSanitizer
- TaintedPathSink
- TemplateInjectionSanitizer
- TemplateInjectionSanitizerWithState
- TemplateInjectionSink
- TemplateInjectionSource
- TrustBoundaryValidationSanitizer
- TrustBoundaryViolationSink
- TrustBoundaryViolationSource
- UrlForwardBarrier
- UrlForwardSink
- UrlOpenSink
- UrlRedirectSanitizer
- XsltInjectionSink
- XssSanitizer
- XxeSanitizer
- XxeSink
Predicates
| asExpr | Gets the expression corresponding to this node, if any. |
| asParameter | Gets the parameter corresponding to this node, if any. |
| getEnclosingCallable | Gets the callable in which this node occurs. |
| getLocation | Gets the source location for this element. |
| getType | Gets the type of this node. |
| getTypeBound | Gets an upper bound on the type of this node. |
| hasLocationInfo | Holds if this element is at the specified location. The location spans column |
| toString | Gets a textual representation of this element. |