CodeQL library for JavaScript/TypeScript
codeql/javascript-all 2.8.0 (changelog, source)
Search

Predicate isIgnoredLibraryFlow

Holds if the given source, sink pair should not be reported, as we don’t have enough confidence in the alert given that source is a library input.

Import path

import semmle.javascript.security.dataflow.PrototypePollutingAssignmentQuery
predicate isIgnoredLibraryFlow(ExternalInputSource source, Sink sink)