CodeQL library for Python
codeql/python-all 4.0.3-dev (changelog, source)
Search

Module XpathInjection

Models Xpath Injection related classes and functions

Import path

import semmle.python.security.dataflow.XpathInjectionCustomizations

Classes

RemoteFlowSourceAsSource

DEPRECATED: Use ActiveThreatModelSource from Concepts instead!

Sanitizer

A sanitizer for “XPath injection” vulnerabilities.

Sink

A data flow sink for “XPath injection” vulnerabilities.

Source

A data flow source for “XPath injection” vulnerabilities.

XPathConstructionArg

A construction of an XPath expression, considered as a sink.

XPathExecutionArg

An execution of an XPath expression, considered as a sink.