CodeQL library for Python
codeql/python-all 0.12.0 (changelog, source)
Search

Module NoSqlInjectionConfig

A taint-tracking configuration for detecting NoSQL injection vulnerabilities.

Import path

import semmle.python.security.dataflow.NoSqlInjectionQuery

Predicates

isAdditionalFlowStep

Holds if data may flow from node1 to node2 in addition to the normal data-flow steps. This step is only applicable in state1 and updates the flow state to state2.

isBarrier

Holds if data flow through node is prohibited. This completely removes node from the data flow graph.

isBarrier

Holds if data flow through node is prohibited when the flow state is state.

isSink

Holds if sink is a relevant data flow sink accepting state.

isSource

Holds if source is a relevant data flow source with the given initial state.

Aliases

FlowState

A flow state, tracking the structure of the data.