Module CorsMisconfigurationForCredentials

Provides a dataflow taint tracking configuration for reasoning about CORS misconfiguration for credentials transfer.

Import path

semmle.javascript.security.dataflow.CorsMisconfigurationForCredentials

Imports

javascript

Provides classes for working with JavaScript programs, as well as JSON, YAML and HTML.

Modules

Aliases

CorsMisconfigurationForCredentialsDataFlowConfiguration

DEPRECATED: Use CorsMisconfigurationForCredentials::Configuration instead.

CorsMisconfigurationForCredentialsSanitizer

DEPRECATED: Use CorsMisconfigurationForCredentials::Sanitizer instead.

CorsMisconfigurationForCredentialsSink

DEPRECATED: Use CorsMisconfigurationForCredentials::Sink instead.

CorsMisconfigurationForCredentialsSource

DEPRECATED: Use CorsMisconfigurationForCredentials::Source instead.