CodeQL library for JavaScript/TypeScript
codeql/javascript-all 2.6.6 (changelog, source)
Search

Class TaintedPath::FlowState::PosixPath

A flow state representing a Posix path.

There are currently four flow states, representing the different combinations of normalization and absoluteness.

Import path

import semmle.javascript.security.dataflow.TaintedPathCustomizations

Direct supertypes

Indirect supertypes

Fields

Predicates

canContainDotDotSlash

Holds if this path may contain ../ components.

getNormalization

Gets a string indicating whether this path is normalized.

getRelativeness

Gets a string indicating whether this path is relative.

isAbsolute

Holds if this path is relative.

isNonNormalized

Holds if this path is not normalized.

isNormalized

Holds if this path is normalized.

isRelative

Holds if this path is relative.

toAbsolute

Gets the path label with absolute flag set to true.

toFlowLabel

DEPRECATED. Gets the corresponding flow label, for backwards compatibility.

toNonNormalized

Gets the path label with normalized flag set to true.

toNormalized

Gets the path label with normalized flag set to true.

toRelative

Gets the path label with absolute flag set to true.

toString

Gets a string representation of this flow state.

Charpred