CodeQL library for Java/Kotlin
codeql/java-all 0.9.2-dev (changelog, source)
Search

Module XssQuery

Provides a taint tracking configuration to track cross site scripting.

Import path

import semmle.code.java.security.XssQuery

Imports

FlowSources

Provides classes representing various flow sources for taint tracking.

TaintTracking

Provides classes for performing local (intra-procedural) and global (inter-procedural) taint-tracking analyses.

XSS

Provides classes to reason about Cross-site scripting (XSS) vulnerabilities.

java

Provides all default Java QL imports.

Modules

XssConfig

A taint-tracking configuration for cross site scripting vulnerabilities.

Aliases

XssFlow

Tracks flow from remote sources to cross site scripting vulnerabilities.