CodeQL library for Java/Kotlin
codeql/java-all 4.2.1-dev (changelog, source)
Search

Member predicate TemplateInjectionAdditionalTaintStep::isAdditionalTaintStep

DEPRECATED: Open-ended flow state is not intended to be part of the extension points.

Holds if the step from node1 to node2 should be considered a taint step for flows related toserver-side template injection (SST) vulnerabilities. This step is only applicable in state1 and updates the flow state to state2.

predicate isAdditionalTaintStep(Node node1, FlowState state1, Node node2, FlowState state2)