Provides a taint tracking configuration for reasoning about shell command constructed from library input vulnerabilities
Note, for performance reasons: only import this file if
UnsafeShellCommandConstructionFlow is needed, otherwise
UnsafeShellCommandConstructionCustomizations should be imported instead.
Import path
import codeql.ruby.security.UnsafeShellCommandConstructionQueryImports
| DataFlow | Provides classes for performing local (intra-procedural) and global (inter-procedural) data flow analyses. |
| UnsafeShellCommandConstruction | Module containing sources, sinks, and sanitizers for shell command constructed from library input. |
Aliases
| UnsafeShellCommandConstructionFlow | Taint-tracking for detecting shell command constructed from library input vulnerabilities. |