CodeQL library for JavaScript/TypeScript
codeql/javascript-all 1.1.2-dev (changelog, source)
Search

Predicate TaintTracking::heapStep

Holds if pred -> succ is a taint propagating data flow edge through the heap.

Import path

import javascript
predicate heapStep(Node pred, Node succ)