Module RequestForgery

Import path

import semmle.javascript.security.dataflow.RequestForgeryCustomizations

Holds if there is a taint step from pred to succ for request forgery.

Sanitizer	A sanitizer for request forgery.
Sink	A data flow sink for request forgery.
Source	A data flow source for request forgery.
UriEncodingSanitizer	A call to `encodeURI` or `encodeURIComponent`, viewed as a sanitizer for request forgery. These calls will escape “/” to “%2F”, which is not a problem for request forgery. The result from calling `encodeURI` or `encodeURIComponent` is not a valid URL, and only makes sense as a part of a URL.