CodeQL library for JavaScript/TypeScript
codeql/javascript-all 2.0.3-dev (changelog, source)
Search

Class UnsafeJQueryPlugin::PropertyPresenceSanitizer

An expression like typeof x.<?> !== "undefined" or x.<?>, which sanitizes x, as it is unlikely to be a string afterwards.

Import path

import semmle.javascript.security.dataflow.UnsafeJQueryPluginCustomizations

Direct supertypes

Indirect supertypes

Fields

Inherited fields

Predicates

getPropRead

Gets the property read that is used to sanitize the base value.

sanitizes

Holds if this node sanitizes expression e, provided it evaluates to outcome.

Inherited predicates

accessesGlobal

Holds if this data flow node accesses the global variable g, either directly or through the window object.

from Node
analyze

Gets type inference results for this data flow node.

from Node
asExpr

Gets the expression corresponding to this data flow node, if any.

from Node
blocks

Holds if this node blocks expression e provided it evaluates to outcome.

from SanitizerGuardNode
blocks

Holds if this node blocks expression e from flow of type label, provided it evaluates to outcome.

from SanitizerGuardNode
getABoundFunctionValue

Gets a function value that may reach this node, possibly derived from a partial function invocation.

from Node
getAFunctionValue

Gets a function value that may reach this node.

from Node
getAFunctionValue

Gets a function value that may reach this node with the given imprecision level.

from Node
getALocalSource

Gets a source node from which data may flow to this node in zero or more local steps.

from Node
getAPredecessor

Gets a data flow node from which data may flow to this node in one local step.

from Node
getASuccessor

Gets a data flow node to which data may flow from this node in one local step.

from Node
getAstNode

Gets the expression or declaration this node corresponds to.

from ValueNode
getBasicBlock

Gets the basic block to which this node belongs.

from ValueNode
getContainer

Gets the container in which this node occurs.

from Node
getEnclosingExpr

Gets the expression enclosing this data flow node. In most cases the result is the same as asExpr(), however this method additionally includes the InvokeExpr corresponding to reflective calls.

from Node
getEndColumn

Gets the end column of this data flow node.

from Node
getEndLine

Gets the end line of this data flow node.

from Node
getFile

Gets the file this data flow node comes from.

from ValueNode
getImmediatePredecessor

Gets the immediate predecessor of this node, if any.

from Node
getIntValue

Gets the integer value of this node, if it is an integer constant.

from Node
getLocation

Gets the location of this node.

from ValueNode
getStartColumn

Gets the start column of this data flow node.

from Node
getStartLine

Gets the start line of this data flow node.

from Node
getStringValue

Gets the string value of this node, if it is a string literal or constant string concatenation.

from Node
getTopLevel

Gets the toplevel in which this node occurs.

from Node
hasLocationInfo

Holds if this element is at the specified location. The location spans column startcolumn of line startline to column endcolumn of line endline in file filepath. For more information, see Locations.

from Node
hasUnderlyingType

Holds if this node is annotated with the given named type, or is declared as a subtype thereof, or is a union or intersection containing such a type.

from Node
hasUnderlyingType

Holds if this node is annotated with the given named type, or is declared as a subtype thereof, or is a union or intersection containing such a type.

from Node
isIncomplete

Holds if the flow information for this node is incomplete.

from Node
mayHaveBooleanValue

Holds if this node may evaluate to the Boolean value b.

from Node
mayHaveStringValue

Holds if this node may evaluate to the string s, possibly through local data flow.

from Node
sanitizes

Holds if this node sanitizes expression e, provided it evaluates to outcome.

from SanitizerGuardNode
toString

Gets a textual representation of this element.

from ValueNode

Charpred