CodeQL library for Python
codeql/python-all 0.6.4 (changelog, source)
Search

Module CommandInjection

Provides default sources, sinks and sanitizers for detecting “command injection” vulnerabilities, as well as extension points for adding your own.

Import path

import semmle.python.security.dataflow.CommandInjectionCustomizations

Classes

CommandExecutionAsSink

A command execution, considered as a flow sink.

RemoteFlowSourceAsSource

A source of remote user input, considered as a flow source.

Sanitizer

A sanitizer for “command injection” vulnerabilities.

SanitizerGuard

DEPRECATED: Use Sanitizer instead.

Sink

A data flow sink for “command injection” vulnerabilities.

Source

A data flow source for “command injection” vulnerabilities.

StringConstCompareAsSanitizerGuard

A comparison with a constant string, considered as a sanitizer-guard.