CodeQL library for Java/Kotlin
codeql/java-all 0.9.2-dev (changelog, source)
Search

Module InsecureRandomnessQuery

Provides classes and predicates for reasoning about insecure randomness.

Import path

import semmle.code.java.security.InsecureRandomnessQuery

Imports

java

Provides all default Java QL imports.

Classes

InsecureRandomnessSink

A node representing an operation which should not use an insecurely random value.

InsecureRandomnessSource

A node representing a source of insecure randomness.

Modules

InsecureRandomnessConfig

A taint-tracking configuration for Insecure randomness.

Aliases

InsecureRandomnessFlow

Taint-tracking flow of a Insecurely random value into a sensitive sink.