A taint propagating data flow edge arising from string concatenations.
Note that since we cannot easily distinguish string append from addition,
we consider any +
operation to propagate taint.
Import path
import javascript
Direct supertypes
Predicates
stringConcatenationStep | Holds if |
Inherited predicates
arrayStep | Holds if | from SharedTaintStep |
deserializeStep | Holds if | from SharedTaintStep |
heapStep | Holds if | from SharedTaintStep |
heuristicStep | Holds if | from SharedTaintStep |
persistentStorageStep | Holds if | from SharedTaintStep |
promiseStep | Holds if | from SharedTaintStep |
serializeStep | Holds if | from SharedTaintStep |
step | Holds if | from SharedTaintStep |
stringManipulationStep | Holds if | from SharedTaintStep |
toString | Gets a textual representation of this element. | from Unit |
uriStep | Holds if | from SharedTaintStep |
viewComponentStep | Holds if | from SharedTaintStep |