CodeQL library for JavaScript/TypeScript
codeql/javascript-all 0.8.13 (changelog, source)
Search

Predicate sanitizingPrefixEdge

Holds if data that flows from source to sink cannot affect the path or earlier part of the resulting string when interpreted as a URL.

This is considered as a sanitizing edge for the URL redirection queries.

Import path

import semmle.javascript.security.dataflow.UrlConcatenation
predicate sanitizingPrefixEdge(Node source, Node sink)