edges
| reflected_xss.py:2:26:2:32 | After ImportMember | reflected_xss.py:2:26:2:32 | request | provenance |  |
| reflected_xss.py:2:26:2:32 | request | reflected_xss.py:9:18:9:24 | request | provenance |  |
| reflected_xss.py:2:26:2:32 | request | reflected_xss.py:21:23:21:29 | request | provenance |  |
| reflected_xss.py:2:26:2:32 | request | reflected_xss.py:27:23:27:29 | request | provenance |  |
| reflected_xss.py:9:5:9:14 | first_name | reflected_xss.py:10:26:10:53 | After BinaryExpr | provenance |  |
| reflected_xss.py:9:18:9:24 | request | reflected_xss.py:9:18:9:29 | After Attribute | provenance | AdditionalTaintStep |
| reflected_xss.py:9:18:9:29 | After Attribute | reflected_xss.py:9:18:9:45 | After Attribute() | provenance | dict.get |
| reflected_xss.py:9:18:9:45 | After Attribute() | reflected_xss.py:9:5:9:14 | first_name | provenance |  |
| reflected_xss.py:21:5:21:8 | data | reflected_xss.py:22:26:22:41 | After Attribute() | provenance | AdditionalTaintStep |
| reflected_xss.py:21:23:21:29 | request | reflected_xss.py:21:5:21:8 | data | provenance | AdditionalTaintStep |
| reflected_xss.py:27:5:27:8 | data | reflected_xss.py:28:26:28:41 | After Attribute() | provenance | AdditionalTaintStep |
| reflected_xss.py:27:23:27:29 | request | reflected_xss.py:27:5:27:8 | data | provenance | AdditionalTaintStep |
nodes
| reflected_xss.py:2:26:2:32 | After ImportMember | semmle.label | After ImportMember |
| reflected_xss.py:2:26:2:32 | request | semmle.label | request |
| reflected_xss.py:9:5:9:14 | first_name | semmle.label | first_name |
| reflected_xss.py:9:18:9:24 | request | semmle.label | request |
| reflected_xss.py:9:18:9:29 | After Attribute | semmle.label | After Attribute |
| reflected_xss.py:9:18:9:45 | After Attribute() | semmle.label | After Attribute() |
| reflected_xss.py:10:26:10:53 | After BinaryExpr | semmle.label | After BinaryExpr |
| reflected_xss.py:21:5:21:8 | data | semmle.label | data |
| reflected_xss.py:21:23:21:29 | request | semmle.label | request |
| reflected_xss.py:22:26:22:41 | After Attribute() | semmle.label | After Attribute() |
| reflected_xss.py:27:5:27:8 | data | semmle.label | data |
| reflected_xss.py:27:23:27:29 | request | semmle.label | request |
| reflected_xss.py:28:26:28:41 | After Attribute() | semmle.label | After Attribute() |
subpaths
#select
| reflected_xss.py:10:26:10:53 | After BinaryExpr | reflected_xss.py:2:26:2:32 | After ImportMember | reflected_xss.py:10:26:10:53 | After BinaryExpr | Cross-site scripting vulnerability due to a $@. | reflected_xss.py:2:26:2:32 | After ImportMember | user-provided value |
| reflected_xss.py:22:26:22:41 | After Attribute() | reflected_xss.py:2:26:2:32 | After ImportMember | reflected_xss.py:22:26:22:41 | After Attribute() | Cross-site scripting vulnerability due to a $@. | reflected_xss.py:2:26:2:32 | After ImportMember | user-provided value |
| reflected_xss.py:28:26:28:41 | After Attribute() | reflected_xss.py:2:26:2:32 | After ImportMember | reflected_xss.py:28:26:28:41 | After Attribute() | Cross-site scripting vulnerability due to a $@. | reflected_xss.py:2:26:2:32 | After ImportMember | user-provided value |