CodeQL library for JavaScript/TypeScript
codeql/javascript-all 2.1.1-dev (changelog, source)
Search

Module SecondOrderCommandInjectionCustomizations

Provides default sources, sinks and sanitizers for reasoning about second order command injection, as well as extension points for adding your own.

Import path

import semmle.javascript.security.dataflow.SecondOrderCommandInjectionCustomizations

Imports

javascript

Provides classes for working with JavaScript programs, as well as JSON, YAML and HTML.

Modules

SecondOrderCommandInjection

Classes and predicates for reasoning about second order command injection.