CodeQL library for JavaScript
codeql/javascript-all 0.6.2 ( changelog , source )
Search

Predicate TaintTracking :: heapStep

Holds if pred -> succ is a taint propagating data flow edge through the heap.

Import path

import javascript
predicate heapStep ( Node pred , Node succ )