A taint propagating data flow edge arising from string concatenations.
Note that since we cannot easily distinguish string append from addition,
we consider any + operation to propagate taint.
Import path
import javascriptDirect supertypes
Predicates
| stringConcatenationStep | Holds if |
Inherited predicates
| arrayStep | Holds if | from SharedTaintStep |
| deserializeStep | Holds if | from SharedTaintStep |
| heapStep | Holds if | from SharedTaintStep |
| heuristicStep | Holds if | from SharedTaintStep |
| persistentStorageStep | Holds if | from SharedTaintStep |
| promiseStep | Holds if | from SharedTaintStep |
| serializeStep | Holds if | from SharedTaintStep |
| step | Holds if | from SharedTaintStep |
| stringManipulationStep | Holds if | from SharedTaintStep |
| toString | Gets a textual representation of this element. | from Unit |
| uriStep | Holds if | from SharedTaintStep |
| viewComponentStep | Holds if | from SharedTaintStep |