CodeQL library for JavaScript/TypeScript

codeql/javascript-all 2.8.0 (changelog, source)

Module PrototypePollutingAssignmentConfig

A taint-tracking configuration for reasoning about prototype-polluting assignments.

Import path

import semmle.javascript.security.dataflow.PrototypePollutingAssignmentQuery

Predicates

getAFeature	Gets a data flow configuration feature to add restrictions to the set of valid flow paths.
isAdditionalFlowStep	Holds if data may flow from `node1` to `node2` in addition to the normal data-flow steps. This step is only applicable in `state1` and updates the flow state to `state2`.
isBarrier	Holds if data flow through `node` is prohibited. This completely removes `node` from the data flow graph.
isBarrier	Holds if data flow through `node` is prohibited when the flow state is `state`.
isBarrierIn	Holds if data flow into `node` is prohibited when the target flow state is `state`.
isBarrierOut	Holds if data flow out of `node` is prohibited when the originating flow state is `state`.
isSink	Holds if `sink` is a relevant data flow sink accepting `state`.
isSource	Holds if `source` is a relevant data flow source with the given initial `state`.
observeDiffInformedIncrementalMode	Holds if sources and sinks should be filtered to only include those that may lead to a flow path with either a source or a sink in the location range given by `AlertFiltering`. This only has an effect when running in diff-informed incremental mode.

Aliases

A flow state to associate with a tracked value.