A taint tracking configuration for untrusted data flowing to an external API.
Import path
import semmle.javascript.security.dataflow.ExternalAPIUsedWithUntrustedDataQuery
Predicates
allowImplicitRead | Holds if an arbitrary number of implicit read steps of content |
isBarrier | Holds if data flow through |
isBarrierIn | Holds if data flow into |
isSink | Holds if |
isSource | Holds if |
observeDiffInformedIncrementalMode | Holds if sources and sinks should be filtered to only include those that may lead to a flow path with either a source or a sink in the location range given by |