mirror of
https://github.com/github/codeql.git
synced 2025-12-25 21:26:37 +01:00
16 lines
336 B
Plaintext
16 lines
336 B
Plaintext
/**
|
|
* @name Taint sinks
|
|
* @description Expressions that are vulnerable if containing untrusted data.
|
|
* @kind problem
|
|
* @problem.severity info
|
|
* @id js/summary/taint-sinks
|
|
* @tags summary
|
|
* @precision medium
|
|
*/
|
|
|
|
import javascript
|
|
import meta.internal.TaintMetrics
|
|
|
|
from string kind
|
|
select relevantTaintSink(kind), kind + " sink"
|