CodeQL library for Java/Kotlin
codeql/java-all 0.9.0 (changelog, source)
Search

Class TemplateInjectionAdditionalTaintStep

A unit class for adding additional taint steps.

Extend this class to add additional taint steps that should apply to flows related to server-side template injection (SST) vulnerabilities.

Import path

import semmle.code.java.security.TemplateInjection

Direct supertypes

Indirect supertypes

Predicates

isAdditionalTaintStep

Holds if the step from node1 to node2 should be considered a taint step for flows related to server-side template injection (SST) vulnerabilities.

isAdditionalTaintStep

DEPRECATED: Open-ended flow state is not intended to be part of the extension points.

Inherited predicates

toString

Gets a textual representation of this element.

from Unit