For other CodeQL resources, including tutorials and examples, see the CodeQL documentation

TaintTrackingUtil

Module TaintTrackingUtil


                                import semmle.code.java.dataflow.internal.TaintTrackingUtil

Cached
FlowSteps	Provides classes representing various flow steps for taint tracking.

defaultImplicitTaintRead	Holds if default `TaintTracking::Configuration`s should allow implicit reads of `c` at sinks and inputs to additional taint steps.
localExprTaint	Holds if taint can flow from `src` to `sink` in zero or more local (intra-procedural) steps.
localTaint	Holds if taint can flow from `src` to `sink` in zero or more local (intra-procedural) steps.

A local variable that is assigned an ObjectOutputStream. Writing tainted data to such a stream causes the underlying OutputStream to be tainted.

LocalTaintFlow	Provides local taint flow restricted to a given set of sources and sinks.
StringBuilderVarModule

Holds if node is an endpoint for local taint flow.