CodeQL library for JavaScript/TypeScript
codeql/javascript-all 0.8.14 (changelog, source)
Search

Predicate IndirectCommandInjection::argsParseStep

Holds if there is a command line parsing step from pred to succ. E.g: var succ = require("minimist")(pred).

Import path

import semmle.javascript.security.dataflow.IndirectCommandInjectionCustomizations
predicate argsParseStep(Node pred, Node succ)