CodeQL library for Ruby
codeql/ruby-all 0.8.15-dev (changelog, source)
Search

Class ReflectedXss::HttpRequestInputAccessAsSource

A HTTP request input, considered as a flow source.

Import path

import codeql.ruby.security.XSS

Direct supertypes

Indirect supertypes

Inherited predicates

asCallable

Gets the callable corresponding to this block, lambda expression, or call to proc or lambda.

from Node
asExpr

Gets the expression corresponding to this node, if any.

from Node
asParameter

Gets the parameter corresponding to this node, if any.

from Node
backtrack

Starts backtracking from this node using API graphs.

from Node
getALocalSource

Gets a local source node from which data may flow to this node in zero or more local data-flow steps.

from Node
getAPredecessor

Gets a data flow node from which data may flow to this node in one local step.

from Node
getASuccessor

Gets a data flow node to which data may flow from this node in one local step.

from Node
getConstantValue

Gets the constant value of this expression, if any.

from Node
getEnclosingMethod

Gets the enclosing method, if any.

from Node
getKind

Gets the kind of the accessed input, Can be one of “parameter”, “header”, “body”, “url”, “cookie”.

from RequestInputAccess
getLocation

Gets the location of this node.

from Node
getSourceType

Gets a string that describes the type of this input.

from RequestInputAccess
hasLocationInfo

Holds if this element is at the specified location. The location spans column startcolumn of line startline to column endcolumn of line endline in file filepath. For more information, see Locations.

from Node
isThirdPartyControllable

Holds if this part of the request may be controlled by a third party, that is, an agent other than the one who sent the request.

from RequestInputAccess
toString

Gets a textual representation of this node.

from Node

Charpred