CodeQL library for JavaScript
Search

Module ExternalAPIUsedWithUntrustedDataQuery

Provides a taint tracking configuration for reasoning about untrusted data flowing to an external API call.

Note, for performance reasons: only import this file if ExternalAPIUsedWithUntrustedData::Configuration is needed, otherwise ExternalAPIUsedWithUntrustedDataCustomizations should be imported instead.

Import path

import semmle.javascript.security.dataflow.ExternalAPIUsedWithUntrustedDataQuery

Imports

ExternalApiUsedWithUntrustedData

Provides sources, sinks and sanitizers for reasoning about flow of untrusted data into an external API.

javascript

Provides classes for working with JavaScript programs, as well as JSON, YAML and HTML.

Classes

Configuration

A taint tracking configuration for untrusted data flowing to an external API.

ExternalApiDataNode

A node representing data being passed to an external API.

ExternalApiUsedWithUntrustedData

An external API which is used with untrusted data.

UntrustedExternalApiDataNode

A node representing untrusted data being passed to an external API.

Aliases

ExternalAPIDataNode

DEPRECATED: Alias for ExternalApiDataNode

ExternalAPIUsedWithUntrustedData

DEPRECATED: Alias for ExternalApiUsedWithUntrustedData

UntrustedExternalAPIDataNode

DEPRECATED: Alias for UntrustedExternalApiDataNode