Module ExternallyControlledFormatStringLocalQuery

Provides a taint-tracking configuration to reason about externally-controlled format strings from local sources.

Import path

import semmle.code.java.security.ExternallyControlledFormatStringLocalQuery

java	Provides all default Java QL imports.

A taint-tracking configuration to reason about externally-controlled format strings from local sources.

DEPRECATED: Use ExternallyControlledFormatStringFlow instead and configure threat model sources to include local.