CodeQL library for Java/Kotlin
codeql/java-all 7.1.3-dev (changelog, source)
Search

Module SensitiveDataExposureThroughErrorMessageQuery

Provides predicates to reason about exposure of error messages.

Import path

import semmle.code.java.security.SensitiveDataExposureThroughErrorMessageQuery

Imports

java

Provides all default Java QL imports.

Predicates

getMessageFlowsExternally

Holds if there is a call to getMessage() that then flows to a servlet response.