sanitizer register.

67 exact model facts. Select a row to inspect access paths, confidence, corroboration, and available editorial guidance.

SymbolEnvironmentKindAccess path
PQescapeLiteralc / stdlibsql-injectionReturnValuePQescapeStringConnc / stdlibsql-injectionArgument[1]mysql_real_escape_stringc / stdlibsql-injectionArgument[1]sanitizejavascript / dompurifyxssArgument[0] -> ReturnValueescapejavascript / escape-htmlxssArgument[0] -> ReturnValueescapejavascript / escape-string-regexpredosArgument[0] -> ReturnValueencodejavascript / hexssArgument[0] -> ReturnValueescapejavascript / hexssArgument[0] -> ReturnValueescapejavascript / lodashxssArgument[0] -> ReturnValuesanitizejavascript / mongo-sanitizenosql-injectionArgument[0] -> ReturnValueescapejavascript / mysqlsql-injectionArgument[0] -> ReturnValuebasenamejavascript / pathpath-traversalArgument[0] -> ReturnValuesanitizeHtmljavascript / sanitize-htmlxssArgument[0] -> ReturnValuequotejavascript / shell-quotecommand-injectionArgument[0] -> ReturnValueescapejavascript / sqlstringsql-injectionArgument[0] -> ReturnValueencodeURIjavascript / stdlibxssArgument[0] -> ReturnValueencodeURIComponentjavascript / stdlibxssArgument[0] -> ReturnValueblacklistjavascript / validatorxssArgument[0] -> ReturnValueescapejavascript / validatorxssArgument[0] -> ReturnValuestripLowjavascript / validatorxssArgument[0] -> ReturnValuewhitelistjavascript / validatorxssArgument[0] -> ReturnValuefilterXSSjavascript / xssxssArgument[0] -> ReturnValueliteral_evalpython / astcode-injectionArgument[0] -> ReturnValuecleanpython / bleachxssArgument[0] -> ReturnValuefloatpython / builtinssql-injectionArgument[0] -> ReturnValueintpython / builtinssql-injectionArgument[0] -> ReturnValuefromstringpython / defusedxml.ElementTreexxeArgument[0] -> ReturnValueparsepython / defusedxml.ElementTreexxeArgument[0] -> ReturnValueescapepython / django.utils.htmlxssArgument[0] -> ReturnValueescapejspython / django.utils.htmlxssArgument[0] -> ReturnValuestrip_tagspython / django.utils.htmlxssArgument[0] -> ReturnValueescapepython / htmlxssArgument[0] -> ReturnValueloadspython / jsondeserializationArgument[0] -> ReturnValueescape_filter_charspython / ldap.filterldap-injectionArgument[0] -> ReturnValueescape_filter_charspython / ldap3.utils.convldap-injectionArgument[0] -> ReturnValueescapepython / markupsafexssArgument[0] -> ReturnValuecleanpython / nh3xssArgument[0] -> ReturnValuebasenamepython / os.pathpath-traversalArgument[0] -> ReturnValueIdentifierpython / psycopg2.sqlsql-injectionArgument[0] -> ReturnValueLiteralpython / psycopg2.sqlsql-injectionArgument[0] -> ReturnValueescapepython / reregexArgument[0] -> ReturnValuequotepython / shlexcommand-injectionArgument[0] -> ReturnValuequotepython / urllib.parsepath-traversalArgument[0] -> ReturnValuequote_pluspython / urllib.parsexssArgument[0] -> ReturnValuesecure_filenamepython / werkzeug.utilspath-traversalArgument[0] -> ReturnValueescapepython / xml.sax.saxutilsxssArgument[0] -> ReturnValuequoteattrpython / xml.sax.saxutilsxssArgument[0] -> ReturnValuesanitizetypescript / dompurifyxssArgument[0] -> ReturnValuesanitizetypescript / stdlibxssArgument[1] -> ReturnValueescapetypescript / escape-htmlxssArgument[0] -> ReturnValueescapetypescript / escape-string-regexpredosArgument[0] -> ReturnValueencodetypescript / hexssArgument[0] -> ReturnValueescapetypescript / hexssArgument[0] -> ReturnValueescapetypescript / lodashxssArgument[0] -> ReturnValuesanitizetypescript / mongo-sanitizenosql-injectionArgument[0] -> ReturnValueescapetypescript / mysqlsql-injectionArgument[0] -> ReturnValuebasenametypescript / pathpath-traversalArgument[0] -> ReturnValuesanitizeHtmltypescript / sanitize-htmlxssArgument[0] -> ReturnValuequotetypescript / shell-quotecommand-injectionArgument[0] -> ReturnValueescapetypescript / sqlstringsql-injectionArgument[0] -> ReturnValueencodeURItypescript / stdlibxssArgument[0] -> ReturnValueencodeURIComponenttypescript / stdlibxssArgument[0] -> ReturnValueblacklisttypescript / validatorxssArgument[0] -> ReturnValueescapetypescript / validatorxssArgument[0] -> ReturnValuestripLowtypescript / validatorxssArgument[0] -> ReturnValuewhitelisttypescript / validatorxssArgument[0] -> ReturnValuefilterXSStypescript / xssxssArgument[0] -> ReturnValue