Module UnsafeDeserializationQuery
Provides a taint-tracking configuration for reasoning about unsafe deserialization.
Note, for performance reasons: only import this file if
UnsafeDeserializationFlow is needed, otherwise
UnsafeDeserializationCustomizations should be imported instead.
Import path
import codeql.ruby.security.UnsafeDeserializationQueryImports
| UnsafeDeserializationCustomizations | Provides default sources, sinks and sanitizers for reasoning about unsafe deserialization, as well as extension points for adding your own. |
Aliases
| UnsafeCodeConstructionFlow | Taint-tracking for reasoning about unsafe deserialization. |