CodeQL library for Java/Kotlin
codeql/java-all 9.0.3 (changelog, source)
Search

Module Sanitizers

Classes to represent sanitizers commonly used in dataflow and taint tracking configurations.

Import path

import semmle.code.java.security.Sanitizers

Imports

java

Provides all default Java QL imports.

Predicates

regexpMatchGuardChecks

Holds if guard holds with branch branch if e matches a regular expression.

Classes

RegexpCheckBarrier

A check against a regular expression, considered as a barrier guard.

SimpleTypeSanitizer

A node whose type is a simple type unlikely to carry taint, such as primitives and their boxed counterparts, java.util.UUID and java.util.Date.