A taint-tracking configuration to reason about improper validation of user-provided array index.
Import path
import semmle.code.java.security.ImproperValidationOfArrayIndexQueryPredicates
| isBarrier | Holds if data flow through |
| isBarrierIn | Holds if data flow into |
| isSink | Holds if |
| isSource | Holds if |
| observeDiffInformedIncrementalMode | Holds if sources and sinks should be filtered to only include those that may lead to a flow path with either a source or a sink in the location range given by |