CodeQL library for JavaScript/TypeScript
codeql/javascript-all 0.8.14 (changelog, source)
Search

Predicate HeuristicNames::nameIndicatesSensitiveData

Holds if name may indicate the presence of sensitive data, and name does not indicate that the data is in fact non-sensitive (for example since it is hashed or encrypted). classification describes the kind of sensitive data involved.

That is, one of the regexps from maybeSensitiveRegexp matches name (with the given classification), and none of the regexps from notSensitiveRegexp matches name.

Import path

import javascript
predicate nameIndicatesSensitiveData(string name, SensitiveDataClassification classification)