CodeQL library for JavaScript/TypeScript
codeql/javascript-all 2.6.1-dev (changelog, source)
Search

Module ImproperCodeSanitizationQuery

Provides a taint-tracking configuration for reasoning about improper code sanitization.

Note, for performance reasons: only import this file if ImproperCodeSanitization::Configuration is needed, otherwise ImproperCodeSanitizationCustomizations should be imported instead.

Import path

import semmle.javascript.security.dataflow.ImproperCodeSanitizationQuery

Imports

ImproperCodeSanitization

Classes and predicates for reasoning about improper code sanitization.

javascript

Provides classes for working with JavaScript programs, as well as JSON, YAML and HTML.

Classes

Configuration

DEPRECATED. Use the ImproperCodeSanitizationFlow module instead.

Modules

ImproperCodeSanitizationConfig

A taint-tracking configuration for reasoning about improper code sanitization vulnerabilities.

Aliases

ImproperCodeSanitizationFlow

Taint-tracking for reasoning about improper code sanitization vulnerabilities.