CodeQL library for JavaScript/TypeScript
codeql/javascript-all 2.6.3 (changelog, source)
Search

Module UnsafeDynamicMethodAccess

Import path

import semmle.javascript.security.dataflow.UnsafeDynamicMethodAccessCustomizations

Predicates

unsafeFunction

DEPRECATED. Use FlowState::unsafeFunction() instead.

Classes

CalleeAsSink

A function invocation of an unsafe function, as a sink for remote unsafe dynamic method access.

FlowState

A flow state to associate with a tracked value.

RemoteFlowSourceAsSource

DEPRECATED: Use ActiveThreatModelSource from Concepts instead!

Sanitizer

A sanitizer for unsafe dynamic method access.

Sink

A data flow sink for unsafe dynamic method access.

Source

A data flow source for unsafe dynamic method access.

UnsafeFunction

DEPRECATED. Use FlowState::unsafeFunction() instead.

Modules

FlowState

Predicates for working with flow states.