mirror of
https://github.com/github/codeql.git
synced 2025-12-18 18:10:39 +01:00
10 lines
448 B
Plaintext
10 lines
448 B
Plaintext
import javascript
|
|
import semmle.javascript.heuristics.AdditionalSources
|
|
import semmle.javascript.security.dataflow.CodeInjectionQuery
|
|
import DataFlow::PathGraph
|
|
|
|
from Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink
|
|
where cfg.hasFlowPath(source, sink) and source.getNode() instanceof HeuristicSource
|
|
select sink.getNode(), source, sink, "$@ flows to here and is interpreted as code.",
|
|
source.getNode(), "User-provided value"
|