Module UnvalidatedDynamicMethodCall

Provides a taint-tracking configuration for reasoning about unvalidated dynamic method calls.

Import path

semmle.javascript.security.dataflow.UnvalidatedDynamicMethodCall

Imports

Express

Provides classes for working with Express applications.

PropertyInjectionShared

Provides predicates for reasoning about flow of user-controlled values that are used as property names.

javascript

Provides classes for working with JavaScript programs, as well as JSON, YAML and HTML.

Modules