mirror of
https://github.com/github/codeql.git
synced 2025-12-17 17:23:36 +01:00
10 lines
458 B
Plaintext
10 lines
458 B
Plaintext
import javascript
|
|
import semmle.javascript.heuristics.AdditionalSources
|
|
import semmle.javascript.security.dataflow.CodeInjection::CodeInjection
|
|
import DataFlow::PathGraph
|
|
|
|
from Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink
|
|
where cfg.hasFlowPath(source, sink) and source.getNode() instanceof HeuristicSource
|
|
select sink.getNode(), source, sink, "$@ flows to here and is interpreted as code.",
|
|
source.getNode(), "User-provided value"
|