Module TemplateInjectionFlowConfig
A taint tracking configuration to reason about server-side template injection (SST) vulnerabilities
Import path
import semmle.code.java.security.TemplateInjectionQuery
Predicates
isAdditionalFlowStep | Holds if data may flow from |
isBarrier | Holds if data flow through |
isSink | Holds if |
isSource | Holds if |