Module ReflectedXSSQuery

Provides a taint-tracking configuration for detecting “reflected server-side cross-site scripting” vulnerabilities.

Note, for performance reasons: only import this file if ReflectedXssFlow is needed, otherwise XSS::ReflectedXss should be imported instead.

Import path

import codeql.ruby.security.ReflectedXSSQuery

DataFlow	Provides classes for performing local (intra-procedural) and global (inter-procedural) data flow analyses.
TaintTracking

Taint-tracking for detecting “reflected server-side cross-site scripting” vulnerabilities.