CodeQL library for JavaScript/TypeScript
codeql/javascript-all 2.6.4-dev (changelog, source)
Search

Module ExternalAPIUsedWithUntrustedDataConfig

A taint tracking configuration for untrusted data flowing to an external API.

Import path

import semmle.javascript.security.dataflow.ExternalAPIUsedWithUntrustedDataQuery

Predicates

allowImplicitRead

Holds if an arbitrary number of implicit read steps of content c may be taken at node.

isBarrier

Holds if data flow through node is prohibited. This completely removes node from the data flow graph.

isBarrierIn

Holds if data flow into node is prohibited.

isSink

Holds if sink is a relevant data flow sink.

isSource

Holds if source is a relevant data flow source.

observeDiffInformedIncrementalMode

Holds if sources and sinks should be filtered to only include those that may lead to a flow path with either a source or a sink in the location range given by AlertFiltering. This only has an effect when running in diff-informed incremental mode.