Module UnsafeShellCommandConstructionQuery

Provides a taint tracking configuration for reasoning about shell command constructed from library input vulnerabilities

Note, for performance reasons: only import this file if UnsafeShellCommandConstructionFlow is needed, otherwise UnsafeShellCommandConstructionCustomizations should be imported instead.

Import path

import codeql.ruby.security.UnsafeShellCommandConstructionQuery

Imports

DataFlow	Provides classes for performing local (intra-procedural) and global (inter-procedural) data flow analyses.
UnsafeShellCommandConstruction	Module containing sources, sinks, and sanitizers for shell command constructed from library input.

Classes

Configuration

A taint-tracking configuration for detecting shell command constructed from library input vulnerabilities. DEPRECATED: Use UnsafeShellCommandConstructionFlow

Aliases

UnsafeShellCommandConstructionFlow

Taint-tracking for detecting shell command constructed from library input vulnerabilities.