CodeQL library for Java/Kotlin
codeql/java-all 0.9.2-dev (changelog, source)
Search

Module XxeLocalQuery

Provides taint tracking configurations to be used in local XXE queries.

Import path

import semmle.code.java.security.XxeLocalQuery

Imports

java

Provides all default Java QL imports.

Classes

XxeLocalConfig

DEPRECATED: Use XxeLocalFlow instead.

Modules

XxeLocalConfig

A taint-tracking configuration for unvalidated local user input that is used in XML external entity expansion.

Aliases

XxeLocalFlow

Detect taint flow of unvalidated local user input that is used in XML external entity expansion.