CodeQL library for JavaScript
Search

Predicate TaintTracking::heapStep

Holds if pred -> succ is a taint propagating data flow edge through the heap.

Import path

import javascript
predicate heapStep(Node pred, Node succ)