CodeQL library for JavaScript/TypeScript
codeql/javascript-all 2.5.1-dev (changelog, source)
Search

Module FlowState

Convenience predicates for working with common flow states.

Import path

import semmle.javascript.security.CommonFlowState

Predicates

fromFlowLabel

DEPRECATED. Gets the flow state corresponding to label.

taint

Gets the flow state representing a value that is considered entirely tainted, except the first character might not be user-controlled.

taintedObject

Gets the flow state representing a deeply tainted object, such as a JSON object parsed from user-controlled data.

taintedPrefix

Gets the flow state representing a string whose prefix is known to be tainted.

taintedUrlSuffix

Gets the flow state representing a URL whose fragment and/or query parts are considered tainted.