Module XmlBomb

Import path

import semmle.javascript.security.dataflow.XmlBombCustomizations

LocationAsSource	An access to `document.location`, considered as a flow source for XML bomb vulnerabilities.
RemoteFlowSourceAsSource	DEPRECATED: Use `ActiveThreatModelSource` from Concepts instead!
Sanitizer	A sanitizer for XML-bomb vulnerabilities.
Sink	A data flow sink for XML-bomb vulnerabilities.
Source	A data flow source for XML-bomb vulnerabilities.
XmlParsingWithEntityResolution	A call to an XML parser that performs internal entity expansion, viewed as a data flow sink for XML-bomb vulnerabilities.