| CFG | module |
| CallExpr | class declared in Expr |
| CallGraph | module |
| CallNode | class declared in API |
| CallNode | class declared in Nodes |
| CallSignature | class declared in Classes |
| CallSignatureType | class declared in TypeScript |
| CallToObjectDefineProperty | class declared in StandardLibrary |
| CallWithAnalyzedReturnFlow | class declared in InterProceduralTypeInference |
| CallWithNonLocalAnalyzedReturnFlow | class declared in InterProceduralTypeInference |
| Callback | class declared in ExceptionXssQuery |
| CalleeAsSink | class declared in UnsafeDynamicMethodAccess |
| CalleeAsSink | class declared in UnvalidatedDynamicMethodCall |
| CanonicalFunctionName | class declared in CanonicalNames |
| CanonicalName | class declared in CanonicalNames |
| CanonicalNames | module |
| CanonicalTypeVariableType | class declared in TypeScript |
| Case | class declared in Stmt |
| CatchClause | class declared in Stmt |
| CatchScope | class declared in Variables |
| CdnScriptElementWithUntrustedContent | class declared in StaticCreation |
| Cfg | module declared in Public |
| ChainSanitizer | class declared in UnsafeShellCommandConstruction |
| ChalkStep | class declared in Logging |
| CharacterClass | class declared in Make |
| CharacterEscapes | module |
| CharacterEscapes | module declared in CharacterEscapes |
| Cheerio | module |
| Cheerio | module declared in Cheerio |
| CheerioObjectCreation | class declared in Cheerio |
| CheerioObjectCreation | module declared in Cheerio |
| Chokidar | class declared in Files |
| ChromeRemoteInterfaceRequest | class declared in ClientRequest |
| ClassComponent | class declared in Vue |
| ClassDeclScope | class declared in Classes |
| ClassDeclStmt | class declared in Classes |
| ClassDefinition | class declared in Classes |
| ClassExpr | class declared in Classes |
| ClassExprScope | class declared in Classes |
| ClassNode | class declared in Nodes |
| ClassNode | module declared in Nodes |
| ClassOrInterface | class declared in Classes |
| ClassType | class declared in TypeScript |
| ClassValidator | module |
| ClassValidator | module declared in ClassValidator |
| Classes | module |
| ClassifyFiles | module |
| Classnames | module |
| ClearTextStorageConfig | module declared in CleartextStorageQuery |
| CleartextLogging | module declared in CleartextLoggingCustomizations |
| CleartextLoggingConfig | module declared in CleartextLoggingQuery |
| CleartextLoggingCustomizations | module |
| CleartextLoggingQuery | module |
| CleartextPasswordExpr | class declared in SensitiveActions |
| CleartextPasswordSource | class declared in InsufficientPasswordHash |
| CleartextStorage | module declared in CleartextStorageCustomizations |
| CleartextStorageCustomizations | module |
| CleartextStorageQuery | module |
| CliColorStep | class declared in Logging |
| CliHighlightStep | class declared in Logging |
| Client | module declared in ConceptsMake::Http |
| ClientCall | class declared in LdapJS |
| ClientRequest | class declared in ClientRequests |
| ClientRequest | module declared in ClientRequests |
| ClientRequestHandler | class declared in NodeJSLib |
| ClientRequestLoginCallback | class declared in NodeJSLib |
| ClientRequestUrl | class declared in InsecureDownload |
| ClientRequests | module |
| ClientSideCookieWrite | class declared in CookieWrites |
| ClientSideRemoteFlowKind | class declared in RemoteFlowSources |
| ClientSideRequestForgeryConfig | module declared in ClientSideRequestForgeryQuery |
| ClientSideRequestForgeryQuery | module |
| ClientSideUrlRedirect | module declared in ClientSideUrlRedirectCustomizations |
| ClientSideUrlRedirectConfig | module declared in ClientSideUrlRedirectQuery |
| ClientSideUrlRedirectCustomizations | module |
| ClientSideUrlRedirectQuery | module |
| ClientSocket | class declared in ClientWebSocket |
| ClientWebSocket | module declared in WebSocket |
| Closure | module |
| Closure | module declared in Closure |
| ClosureLibrary | module |
| ClosureLibrary | module declared in ClosureLibrary |
| ClosureModule | class declared in Closure |
| ClosureModuleDeclaration | class declared in Closure |
| ClosureNamespaceAccess | class declared in Closure |
| ClosureNamespaceAccess | module declared in Closure |
| ClosureNamespaceRef | class declared in Closure |
| ClosureNamespaceRef | module declared in Closure |
| ClosureNode | class declared in Flow |
| ClosureProvideCall | class declared in Closure |
| ClosureRequireCall | class declared in Closure |
| ClosureScript | class declared in Closure |
| ClosureXhrIoRequest | class declared in ClientRequest |
| CloudFunctions | module declared in Firebase |
| CodeGeneratorMarkerComment | class declared in GeneratedCode |
| CodeInAttribute | class declared in AST |
| CodeInjection | module declared in CodeInjectionCustomizations |
| CodeInjectionConfig | module declared in CodeInjectionQuery |
| CodeInjectionCustomizations | module |
| CodeInjectionQuery | module |
| CollectionMembershipCandidate | class declared in MembershipCandidate |
| Collections | module |
| ColoretteStep | class declared in Logging |
| ColorsStep | class declared in Logging |
| CommandInjection | module declared in CommandInjectionCustomizations |
| CommandInjectionConfig | module declared in CommandInjectionQuery |
| CommandInjectionCustomizations | module |
| CommandInjectionQuery | module |
| CommandLineArguments | module |
| CommandLineArguments | class declared in CommandLineArguments |
| CommandLineArguments | module declared in CommandLineArguments |
| Comment | class declared in Comments |
| CommentNode | class declared in HTML |
| Comments | module |
| CommonFlowState | module |
| Comparison | class declared in Expr |
| Component | class declared in Vue |
| ComponentClass | class declared in Angular2 |
| ComponentDefinition | class declared in ServiceDefinitions |
| ComponentDirective | class declared in AngularJSCore |
| ComponentExtension | class declared in Vue |
| ComponentRegistration | class declared in Vue |
| ComposedFunctions | module |
| CompositeAction | class declared in Actions |
| CompoundAssignExpr | class declared in Expr |
| ComprehensionBlock | class declared in Expr |
| ComprehensionBlockScope | class declared in Variables |
| ComprehensionExpr | class declared in Expr |
| Concatenation | class declared in StringOps |
| ConcatenationLeaf | class declared in StringOps |
| ConcatenationNode | class declared in StringOps |
| ConcatenationOperand | class declared in StringOps |
| ConcatenationRoot | class declared in StringOps |
| Concepts | module |
| ConceptsMake | module declared in ConceptsShared |
| ConceptsShared | module |
| ConcreteControlFlowNode | class declared in CFG |
| Concretizer | module declared in Make |
| ConditionGuardNode | class declared in CFG |
| ConditionKind | class declared in SuccessorType |
| ConditionalBypass | module declared in ConditionalBypassCustomizations |
| ConditionalBypassConfig | module declared in ConditionalBypassQuery |
| ConditionalBypassCustomizations | module |
| ConditionalBypassQuery | module |
| ConditionalConstant | class declared in SyntacticConstants |
| ConditionalExpr | class declared in Expr |
| ConditionalTypeExpr | class declared in TypeScript |
| ConditionalTypeScope | class declared in TypeScript |
| Config | class declared in Babel |
| ConfigMethodDefinition | class declared in ServiceDefinitions |
| Configs | module declared in DataFlow |
| Configuration | class declared in BrokenCryptoAlgorithmQuery |
| Configuration | class declared in BuildArtifactLeakQuery |
| Configuration | class declared in CleartextLoggingQuery |
| Configuration | class declared in CleartextStorageQuery |
| Configuration | class declared in ClientSideRequestForgeryQuery |
| Configuration | class declared in ClientSideUrlRedirectQuery |
| Configuration | class declared in CodeInjectionQuery |
| Configuration | class declared in CommandInjectionQuery |
| Configuration | class declared in ConditionalBypassQuery |
| Configuration | module |
| Configuration | class declared in Configuration |
| Configuration | class declared in CorsMisconfigurationForCredentialsQuery |
| Configuration | class declared in DeepObjectResourceExhaustionQuery |
| Configuration | class declared in DomBasedXssQuery |
| Configuration | class declared in ESLint |
| Configuration | class declared in ExceptionXssQuery |
| Configuration | class declared in ExternalAPIUsedWithUntrustedDataQuery |
| Configuration | class declared in FileAccessToHttpQuery |
| Configuration | class declared in HardcodedCredentialsQuery |
| Configuration | class declared in HardcodedDataInterpretedAsCodeQuery |
| Configuration | class declared in HostHeaderPoisoningInEmailGenerationQuery |
| Configuration | class declared in HttpToFileAccessQuery |
| Configuration | class declared in ImproperCodeSanitizationQuery |
| Configuration | class declared in IncompleteHtmlAttributeSanitizationQuery |
| Configuration | class declared in IndirectCommandInjectionQuery |
| Configuration | class declared in InsecureDownloadQuery |
| Configuration | class declared in InsecureRandomnessQuery |
| Configuration | class declared in InsecureTemporaryFileQuery |
| Configuration | class declared in InsufficientPasswordHashQuery |
| Configuration | class declared in LoopBoundInjectionQuery |
| Configuration | class declared in NosqlInjectionQuery |
| Configuration | class declared in PolynomialReDoSQuery |
| Configuration | class declared in PostMessageStarQuery |
| Configuration | class declared in PrototypePollutingAssignmentQuery |
| Configuration | class declared in PrototypePollutionQuery |
| Configuration | class declared in ReflectedXssQuery |
| Configuration | class declared in RegExpInjectionQuery |
| Configuration | class declared in RemotePropertyInjectionQuery |
| Configuration | class declared in RequestForgeryQuery |
| Configuration | class declared in ResourceExhaustionQuery |
| Configuration | class declared in SecondOrderCommandInjectionQuery |
| Configuration | class declared in ServerSideUrlRedirectQuery |
| Configuration | class declared in ShellCommandInjectionFromEnvironmentQuery |
| Configuration | class declared in SqlInjectionQuery |
| Configuration | class declared in StackTraceExposureQuery |
| Configuration | class declared in StoredXssQuery |
| Configuration | class declared in TaintTracking |
| Configuration | class declared in TaintedFormatStringQuery |
| Configuration | class declared in TaintedPathQuery |
| Configuration | class declared in TypeConfusionThroughParameterTamperingQuery |
| Configuration | class declared in UnsafeCodeConstruction |
| Configuration | class declared in UnsafeDeserializationQuery |
| Configuration | class declared in UnsafeDynamicMethodAccessQuery |
| Configuration | class declared in UnsafeHtmlConstructionQuery |
| Configuration | class declared in UnsafeJQueryPluginQuery |
| Configuration | class declared in UnsafeShellCommandConstructionQuery |
| Configuration | class declared in UnvalidatedDynamicMethodCallQuery |
| Configuration | class declared in XmlBombQuery |
| Configuration | class declared in XpathInjectionQuery |
| Configuration | class declared in XssThroughDomQuery |
| Configuration | class declared in XxeQuery |
| Configuration | class declared in ZipSlipQuery |
| ConfigurationObject | class declared in ESLint |
| Connect | module |
| Connect | module declared in Connect |
| ConnectExpressShared | module |
| ConnectExpressShared | module declared in ConnectExpressShared |
| ConnectionCallAsRouteHandler | class declared in ServerWebSocket |
| Consistency | module declared in Make |
| ConsistencyChecking | module |
| ConsistencyChecks | module declared in Flow |
| ConsistencyConfiguration | class declared in ConsistencyChecking |
| ConstDeclStmt | class declared in Stmt |
| ConstantExpr | class declared in Constants |
| ConstantRecipeDefinition | class declared in ServiceDefinitions |
| ConstantString | class declared in Constants |
| ConstantStringSource | class declared in HardcodedCredentials |
| Constants | module |
| Constructor | class declared in Functions |
| ConstructorCallSignature | class declared in Classes |
| ConstructorCallSignatureType | class declared in TypeScript |
| ConstructorDeclaration | class declared in Classes |
| ConstructorDefinition | class declared in Classes |
| ConstructorSignature | class declared in Classes |
| ConstructorTag | class declared in Externs |
| ConstructorTypeExpr | class declared in TypeScript |
| Container | class declared in Make |
| ContainsDotDotRegExpSanitizer | class declared in TaintedPath |
| ContainsDotDotSanitizer | class declared in TaintedPath |
| ContainsHtmlGuard | class declared in Shared |
| Content | class declared in Public |
| ContentSet | class declared in Public |
| ContentSet | module declared in Public |
| ContextNode | class declared in Koa |
| ContinueStmt | class declared in Stmt |
| ContinueSuccessor | class declared in SuccessorType |
| ContributorInfo | class declared in NPM |
| ControlFlowEntryNode | class declared in CFG |
| ControlFlowExitNode | class declared in CFG |
| ControlFlowNode | class declared in CFG |
| ControlStmt | class declared in Stmt |
| Controller | class declared in AngularJSCore |
| ControllerDefinition | class declared in ServiceDefinitions |
| CookieCryptographicKey | class declared in Http |
| CookieDefinition | class declared in Http |
| CookieLibraries | module |
| CookieMiddlewareInstance | class declared in Http |
| CookieParser | module declared in ExpressLibraries |
| CookieSession | module declared in ExpressLibraries |
| CookieStorageSink | class declared in CleartextStorage |
| CookieWrite | class declared in CookieWrites |
| CookieWrites | module declared in CookieLibraries |
| CorsMisconfigurationConfig | module declared in CorsMisconfigurationForCredentialsQuery |
| CorsMisconfigurationForCredentials | module declared in CorsMisconfigurationForCredentialsCustomizations |
| CorsMisconfigurationForCredentialsCustomizations | module |
| CorsMisconfigurationForCredentialsQuery | module |
| CorsOriginHeaderWithAssociatedCredentialHeader | class declared in CorsMisconfigurationForCredentials |
| CorsOriginSink | class declared in CorsPermissiveConfiguration |
| CorsPermissiveConfiguration | module declared in CorsPermissiveConfigurationCustomizations |
| CorsPermissiveConfigurationConfig | module declared in CorsPermissiveConfigurationQuery |
| CorsPermissiveConfigurationCustomizations | module |
| CorsPermissiveConfigurationQuery | module |
| CreateWriteStreamSink | class declared in ZipSlip |
| Credentials | class declared in AWS |
| Credentials | class declared in Azure |
| Credentials | class declared in Connect |
| Credentials | module |
| Credentials | class declared in DigitalOcean |
| Credentials | class declared in Express |
| Credentials | class declared in NodeJSLib |
| Credentials | class declared in PkgCloud |
| Credentials | class declared in Request |
| CredentialsExpr | module declared in Credentials |
| CredentialsFunctionName | class declared in SensitiveActions |
| CredentialsNode | class declared in Credentials |
| CryptoAlgorithms | module |
| CryptoAlgorithms | module |
| CryptoKeySink | class declared in InsecureRandomness |
| CryptoLibraries | module |
| CryptographicAlgorithm | class declared in CryptoAlgorithms |
| CryptographicKey | class declared in CryptoLibraries |
| CryptographicKeyCreation | class declared in CryptoLibraries |
| CryptographicKeyCredentialsExpr | class declared in CryptoLibraries |
| CryptographicOperation | module declared in ConceptsMake::Cryptography |
| Cryptography | module declared in Concepts |
| Cryptography | module declared in ConceptsMake |
| CucumberTest | class declared in Testing |
| CurlDownload | class declared in ClientRequest |
| CustomAbstractValue | class declared in AbstractValues |
| CustomAbstractValueDefinition | class declared in CustomAbstractValueDefinitions |
| CustomAbstractValueDefinitions | module |
| CustomAbstractValueFromDefinition | class declared in CustomAbstractValueDefinitions |
| CustomAbstractValueFromDefinitionNode | class declared in CustomAbstractValueDefinitions |
| CustomAbstractValueTag | class declared in AbstractValues |
| CustomDirective | class declared in AngularJSCore |
| CustomEventEmitter | class declared in NodeJSLib |
| CustomServiceDefinition | class declared in ServiceDefinitions |
| CustomServiceReference | class declared in ServiceDefinitions |
| Customizations | module |
| call | member predicate declared in DataFlow::TypeTracker |
| callEdge | predicate declared in CallGraph |
| calls | member predicate declared in MethodCallExpr |
| calls | member predicate declared in DataFlow::MethodCallNode |
| canContainDotDotSlash | member predicate declared in TaintedPath::FlowState::PosixPath |
| canContainDotDotSlash | member predicate declared in TaintedPath::Label::PosixPath |
| canThrowSensitiveInformation | predicate declared in ExceptionXssQuery |
| capitalize | predicate declared in Util |
| capturePostUpdateNode | predicate declared in Flow |
| capturedVariableNode | predicate declared in DataFlow |
| certificate | predicate declared in SensitiveDataClassification |
| chainableMethod | predicate declared in EventEmitter |
| character | predicate declared in IncompleteHtmlAttributeSanitization::FlowState |
| cheerioObjectRef | predicate declared in Cheerio |
| cheerioRef | predicate declared in Cheerio |
| choose | member predicate declared in Make::CharacterClass |
| classify | predicate declared in ClassifyFiles |
| clearsContent | predicate declared in Flow |
| clientRequestResponse | predicate declared in InsecureDownload |
| closureAliasMustBeInSameScope | predicate declared in Flow::ConsistencyChecks |
| closureMustHaveBody | predicate declared in Flow::ConsistencyChecks |
| commitLikeFunctionRef | predicate declared in Vuex |
| comparisonEdge | predicate declared in RangeAnalysis |
| concretize | predicate declared in Make::Concretizer |
| config | predicate declared in PasswordInConfigurationFileQuery |
| consistencyIssue | predicate declared in ConsistencyChecking |
| consistencyOverview | predicate declared in Flow::ConsistencyChecks |
| constructor | predicate declared in SignatureKind |
| contains | member predicate declared in Location |
| content | predicate declared in API::Label |
| continue | member predicate declared in DataFlow::TypeBackTracker |
| continue | member predicate declared in DataFlow::TypeTracker |
| createCallbackString | predicate declared in PrettyPrintCatCall |
| createFileArgument | predicate declared in PrettyPrintCatCall |
| createFileThatIsReadFromCommandList | predicate declared in PrettyPrintCatCall |
| createReadFileCall | predicate declared in PrettyPrintCatCall |
| currentThreatModel | predicate declared in ThreatModels |