CodeQL library for JavaScript/TypeScript
codeql/javascript-all 2.5.1-dev (changelog, source)
Search

Class FlowState

A flow state indicating which part of a value is tainted.

Import path

import semmle.javascript.security.CommonFlowState

Direct supertypes

Predicates

isTaint

Holds if this represents a value that is considered entirely tainted, except the first character might not be user-controlled.

isTaintedObject

Holds if this represents a deeply tainted object, such as a JSON object parsed from user-controlled data.

isTaintedPrefix

Holds if this represents a string whose prefix is known to be tainted.

isTaintedUrlSuffix

Holds if this represents a URL whose fragment and/or query parts are considered tainted.

toFlowLabel

DEPRECATED. Gets the corresponding flow label.

toString

Gets a string representation of this flow state.