Module XssThroughDomQuery

Provides a taint-tracking configuration for reasoning about cross-site scripting vulnerabilities through the DOM.

Import path

import semmle.javascript.security.dataflow.XssThroughDomQuery

Provides classes for working with JavaScript programs, as well as JSON, YAML and HTML.

Holds if the source,sink pair should not be reported.

Configuration	DEPRECATED. Use the `XssThroughDomFlow` module instead.
TypeTestGuard	A test for the value of `typeof x`, restricting the potential types of `x`.

A taint-tracking configuration for reasoning about XSS through the DOM.

Taint-tracking configuration for reasoning about XSS through the DOM.