Module FlowSources

Provides classes representing various flow sources for taint tracking.

Import path

semmle.code.java.dataflow.FlowSources

Imports

ApacheHttp
DataFlow

Provides classes for performing local (intra-procedural) and global (inter-procedural) data flow analyses.

DefUse

Provides classes and predicates for def-use and use-use pairs. Built on top of the SSA library for maximal precision.

Intent
JaxWS
Jdbc

Provides classes and predicates for working with the Java JDBC API.

Networking
Properties
Rmi
Servlets

Provides classes and predicates for working with the Java Servlet API.

SpringWeb
TaintTracking

Provides classes for performing local (intra-procedural) and global (inter-procedural) taint-tracking analyses.

WebView
XmlParsing
java

Provides all default Java QL imports.

Classes

AndroidIntentInput

Android Intent that may have come from a hostile application.

DatabaseInput
EnvInput
LocalUserInput

Input that may be controlled by a local user.

RemoteUserInput

Input that may be controlled by a remote user.

ReverseDNSMethod
TypeInetAddr
UserInput

Class for tainted user input.