find_taint_flows
Trace tainted input from request parameters to known sink methods, confirming flows where the first argument reaches a sink's first parameter for OWASP vulnerability analysis.
Instructions
Return confirmed taint flows where a tainted argument (position 0) flows to a known sink's first parameter.
Stricter than find_taint_sinks — only returns findings where:
1. The caller method has a @RequestParam/@RequestBody/@PathVariable parameter (taint source)
2. The CALLS edge has caller_arg_pos=0 (first argument is passed)
3. The callee method name matches a known sink
Returns:
List of dicts with keys:
``source_method_fqn``, ``sink_method_name``, ``caller_arg_pos``,
``callee_param_pos``, ``file_path``, ``line_start``, ``owasp_category``.Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| repo_name | Yes |
Output Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |