Variable PROBLEMATIC_INPUTSConst

Type Declaration

• ReadonlycreateSearch: (
      config: ProblematicInputsConfig,
  ) => FlowrSearchBuilder<
      "from-query",
      [],
      ParentInformation,
      FlowrSearchElements<
          ParentInformation,
          FlowrSearchElement<ParentInformation>[],
      >,
  >

• Readonlyinfo: {
      certainty: BestEffort;
      defaultConfig: {
          consider: readonly ["^eval$", "^system$", "^system2$", "^shell$"];
          pipeCommandFunctions: readonly PipeCommandFunctionSpec[];
      };
      description: "Detects uses of dynamic calls (e.g. eval, system) with non-constant inputs, and graphics-device calls (pdf, postscript) where a filename starts with '|' indicating a pipe command injection.";
      name: "Problematic inputs";
      tags: readonly [Security, Smell, Readability, Performance];
  }

• ReadonlyprettyPrint: {
      full: (result: ProblematicInputsResult) => string;
      query: (result: ProblematicInputsResult) => string;
  }

• ReadonlyprocessSearchResult: (
      elements: FlowrSearchElements<
          ParentInformation,
          FlowrSearchElement<ParentInformation>[],
      >,
      config: ProblematicInputsConfig,
      data: {
          analyzer: ReadonlyFlowrAnalysisProvider;
          cfg: ControlFlowInformation;
          dataflow: DataflowInformation;
          normalize: NormalizedAst;
      },
  ) => Promise<{ ".meta": {}; results: ProblematicInputsResult[] }>