CodeQL library for JavaScript/TypeScript
codeql/javascript-all 2.6.16 (changelog, source)
Search

Module CorsPermissiveConfiguration

Module containing sources, sinks, and sanitizers for overly permissive CORS configurations.

Import path

import semmle.javascript.security.CorsPermissiveConfigurationCustomizations

Classes

CorsOriginSink

The value of cors origin when initializing the application.

FlowState

A flow state to associate with a tracked value.

PermissiveValue

An overly permissive value for origin configuration.

Sanitizer

A sanitizer for permissive CORS configuration.

Sink

A data flow sink for permissive CORS configuration.

Source

A data flow source for permissive CORS configuration.

Modules

FlowState

Predicates for working with flow states.