CodeQL library for Ruby
codeql/ruby-all 5.0.3-dev (changelog, source)
Search

Module PathInjectionQuery

Provides a taint tracking configuration for reasoning about path injection vulnerabilities.

Note, for performance reasons: only import this file if PathInjectionFlow is needed, otherwise PathInjectionCustomizations should be imported instead.

Import path

import codeql.ruby.security.PathInjectionQuery

Imports

PathInjectionCustomizations

Provides default sources, sinks and sanitizers for reasoning about path injection vulnerabilities, as well as extension points for adding your own.

Aliases

PathInjectionFlow

Taint-tracking for detecting path injection vulnerabilities.