CodeQL library for Python
codeql/python-all 0.11.13 (changelog, source)
Search

Module Escaping

Provides a class for modeling new escaping APIs.

Import path

import semmle.python.Concepts

Predicates

getHtmlKind

Gets the escape-kind for escaping a string so it can safely be included in HTML.

getLdapDnKind

Gets the escape-kind for escaping a string so it can safely be used as a distinguished name (DN) in an LDAP search.

getLdapFilterKind

Gets the escape-kind for escaping a string so it can safely be used as a filter in an LDAP search.

getRegexKind

Gets the escape-kind for escaping a string so it can safely be included in a regular expression.

getXmlKind

Gets the escape-kind for escaping a string so it can safely be included in XML.

Classes

Range

A data-flow node that escapes meta-characters, which could be used to prevent injection attacks.