codeql/semmlecode-python-queries/semmle/python/security/Paths.qll

import python

import semmle.python.security.TaintTracking

query predicate edges(TaintedNode fromnode, TaintedNode tonode) {
    fromnode.getASuccessor() = tonode
}

private TaintedNode first_child(TaintedNode parent) {
    result.getContext().getCaller() = parent.getContext() and
    parent.getASuccessor() = result
}

private TaintedNode next_sibling(TaintedNode child) {
    child.getASuccessor() = result and
    child.getContext() = result.getContext()
}

query predicate parents(TaintedNode child, TaintedNode parent) {
    child = first_child(parent) or
    exists(TaintedNode prev |
        parents(prev, parent) and
        child = next_sibling(child)
    )
}