CodeQL library for Ruby
codeql/ruby-all 0.8.15-dev (changelog, source)
Search

Module CleartextLogging

Provides default sources, sinks and sanitizers for reasoning about cleartext logging of sensitive information, as well as extension points for adding your own.

Import path

import codeql.ruby.security.CleartextLoggingCustomizations

Predicates

isAdditionalTaintStep

Holds if nodeFrom taints nodeTo.

Classes

Sink

A data flow sink for cleartext logging of sensitive information.

Aliases

Sanitizer

A sanitizer for cleartext logging of sensitive information.

Source

A data flow source for cleartext logging of sensitive information.