Module InsecureRandomness::Random

Imports

Remote

Provides classes representing data flow sources for remote user input.

SensitiveActions

Provides classes and predicates for identifying sensitive data and methods for security.

Classes

AlreadyTrackedSanitizer

Stop tracking beyond first assignment to sensitive element, so as to remove duplication in the reported results.

RandomSource

A source of cryptographically insecure random numbers.

Sanitizer

A sanitizer for insecure randomness in security sensitive context.

SensitiveSink

A value assigned to a property, variable or parameter which holds security sensitive data.

Sink

A data flow sink for insecure randomness in security sensitive context.

Source

A data flow source for insecure randomness in security sensitive context.

TaintTrackingConfiguration

A taint-tracking configuration for insecure randomness in security sensitive context.