CodeQL library for JavaScript/TypeScript
codeql/javascript-all 0.8.14 (changelog, source)
Search

Module StackTraceExposure

Import path

import semmle.javascript.security.dataflow.StackTraceExposureCustomizations

Classes

DefaultSink

An expression that can become part of an HTTP response body, viewed as a data flow sink for stack trace exposure vulnerabilities.

DefaultSource

A read of the stack property of an exception, viewed as a data flow sink for stack trace exposure vulnerabilities.

Sink

A data flow sink for stack trace exposure vulnerabilities.

Source

A data flow source for stack trace exposure vulnerabilities.