Module Concepts

Provides abstract classes representing generic concepts such as file system access or system command execution, for which individual framework libraries provide concrete subclasses.

Import path

import semmle.javascript.Concepts

Imports

javascript

Provides classes for working with JavaScript programs, as well as JSON, YAML and HTML.

Classes

ActiveThreatModelSource	A data flow source that is enabled in the current threat model configuration.
DatabaseAccess	A data flow node that performs a database access.
FileNameSource	A data flow node that contains a file name or an array of file names from the local file system.
FileSystemAccess	A data flow node that performs a file system access (read, write, copy, permissions, stats, etc).
FileSystemReadAccess	A data flow node that reads data from the file system.
FileSystemWriteAccess	A data flow node that writes data to the file system.
PersistentReadAccess	A data flow node that reads persistent data.
PersistentWriteAccess	A data flow node that writes persistent data.
SystemCommandExecution	A data flow node that executes an operating system command, for instance by spawning a new process.
ThreatModelSource	A data flow source, for a specific threat-model.

Modules

Cryptography	Provides models for cryptographic things.
ThreatModelSource	Provides a class for modeling new sources for specific threat-models.