Interface TaintFinding

A single finding produced by a taint analysis, i.e. an AST node whose inferred taint reached Bottom (e.g. a sink call).

interface TaintFinding {
    loc?: readonly [Line, Column, Line, Column, string | undefined];
    msg?: string;
    nodeId: NodeId;
}

Properties

loc?: readonly [Line, Column, Line, Column, string | undefined]

The source location of the AST node, if it could be resolved

msg?: string

The rendered report message for this finding, set only when the analysis uses a per-finding ReportTemplate

nodeId: NodeId

The AST node ID that reached Bottom