Module JndiInjectionFlowConfig
A taint-tracking configuration for unvalidated user input that is used in JNDI lookup.
Import path
import semmle.code.java.security.JndiInjectionQuery
Predicates
isAdditionalFlowStep | Holds if data may flow from |
isBarrier | Holds if data flow through |
isSink | Holds if |
isSource | Holds if |
observeDiffInformedIncrementalMode | Holds if sources and sinks should be filtered to only include those that may lead to a flow path with either a source or a sink in the location range given by |