Class Http::Server::RequestInputAccess
An access to a user-controlled HTTP request input. For example, the URL or body of a request.
Instances of this class automatically become RemoteFlowSource
s.
Extend this class to refine existing API models. If you want to model new APIs,
extend RequestInputAccess::Range
instead.
Import path
import codeql.ruby.Concepts
Direct supertypes
Indirect supertypes
Known direct subtypes
Predicates
getKind | Gets the kind of the accessed input, Can be one of “parameter”, “header”, “body”, “url”, “cookie”. |
getSourceType | Gets a string that describes the type of this input. |
isThirdPartyControllable | Holds if this part of the request may be controlled by a third party, that is, an agent other than the one who sent the request. |
Inherited predicates
asCallable | Gets the callable corresponding to this block, lambda expression, or call to | from Node |
asExpr | Gets the expression corresponding to this node, if any. | from Node |
asParameter | Gets the parameter corresponding to this node, if any. | from Node |
backtrack | Starts backtracking from this node using API graphs. | from Node |
getALocalSource | Gets a local source node from which data may flow to this node in zero or more local data-flow steps. | from Node |
getAPredecessor | Gets a data flow node from which data may flow to this node in one local step. | from Node |
getASuccessor | Gets a data flow node to which data may flow from this node in one local step. | from Node |
getConstantValue | Gets the constant value of this expression, if any. | from Node |
getEnclosingMethod | Gets the enclosing method, if any. | from Node |
getLocation | Gets the location of this node. | from Node |
hasLocationInfo | Holds if this element is at the specified location. The location spans column | from Node |
toString | Gets a textual representation of this node. | from Node |