CodeQL library for JavaScript/TypeScript
codeql/javascript-all 2.8.2 (changelog, source)
Search

Predicate isTaintedGuardNodeForSensitiveAction

Holds if sink guards action, and source taints sink.

If flow from source taints sink, then an attacker can control if action should be executed or not.

Import path

import semmle.javascript.security.dataflow.ConditionalBypassQuery
predicate isTaintedGuardNodeForSensitiveAction(PathNode sink, PathNode source, SensitiveAction action)