CodeQL library for JavaScript
Search

Module ForwardDataFlow

Provides machinery for performing forward data-flow exploration.

Importing this module effectively makes all data-flow and taint-tracking configurations ignore their isSink predicate. Instead, flow is tracked from source nodes as far as possible, until a terminal node (that is, a node without any outgoing flow) is reached. All terminal nodes are then treated as sink nodes.

Data-flow exploration cannot be used with configurations depending on other configurations.

NOTE: This library should only be used for debugging and exploration, not in production code.

Import path

import semmle.javascript.explore.ForwardDataFlow

Imports

javascript

Provides classes for working with JavaScript programs, as well as JSON, YAML and HTML.