Module UnsafeCodeConstructionQuery

Provides a taint-tracking configuration for reasoning about code constructed from library input vulnerabilities.

Note, for performance reasons: only import this file if UnsafeCodeConstructionFlow is needed, otherwise UnsafeCodeConstructionCustomizations should be imported instead.

Import path

import codeql.ruby.security.UnsafeCodeConstructionQuery

Imports

DataFlow	Provides classes for performing local (intra-procedural) and global (inter-procedural) data flow analyses.
UnsafeCodeConstruction	Module containing sources, sinks, and sanitizers for code constructed from library input.

Classes

Configuration

A taint-tracking configuration for detecting code constructed from library input vulnerabilities. DEPRECATED: Use UnsafeCodeConstructionFlow

Aliases

UnsafeCodeConstructionFlow

Taint-tracking for detecting code constructed from library input vulnerabilities.