Predicate isSensitiveResultReceiver
Holds if there is a path from sensitive data at src
to a result receiver at sink
, and the receiver was obtained from an untrusted source recSrc
.
Import path
import semmle.code.java.security.SensitiveResultReceiverQuery
predicate isSensitiveResultReceiver(PathNode src, PathNode sink, Node recSrc)