CodeQL library for JavaScript/TypeScript
codeql/javascript-all 0.8.12 (changelog, source)
Search

Module UnsafeHtmlConstructionCustomizations

Provides default sources, sinks and sanitizers for reasoning about unsafe HTML constructed from library input, as well as extension points for adding your own.

Import path

import semmle.javascript.security.dataflow.UnsafeHtmlConstructionCustomizations

Imports

javascript

Provides classes for working with JavaScript programs, as well as JSON, YAML and HTML.

Modules

UnsafeHtmlConstruction

Module containing sources, sinks, and sanitizers for unsafe HTML constructed from library input.