Module ReflectedXss

Provides default sources, sinks and sanitizers for detecting “reflected server-side cross-site scripting” vulnerabilities, as well as extension points for adding your own.

Import path

import semmle.python.security.dataflow.ReflectedXSSCustomizations

Classes

ConstCompareAsSanitizerGuard	A comparison with a constant, considered as a sanitizer-guard.
HtmlEscapingAsSanitizer	An HTML escaping, considered as a sanitizer.
RemoteFlowSourceAsSource	DEPRECATED: Use `ActiveThreatModelSource` from Concepts instead!
Sanitizer	A sanitizer for “reflected server-side cross-site scripting” vulnerabilities.
ServerHttpResponseBodyAsSink	The body of a HTTP response that will be returned from a server, considered as a flow sink.
Sink	A data flow sink for “reflected server-side cross-site scripting” vulnerabilities.
Source	A data flow source for “reflected server-side cross-site scripting” vulnerabilities.

Aliases

StringConstCompareAsSanitizerGuard

DEPRECATED: Use ConstCompareAsSanitizerGuard instead.