apunkt/nyx
1
0
Fork 0
mirror of https://github.com/elicpeter/nyx.git synced 2026-06-09 19:45:13 +02:00
Code Issues Projects Releases Packages Wiki Activity
nyx/tests/fixtures/real_world/javascript/taint
History
Eli Peter 58f1794a4e
Added Cap::DATA_EXFIL and taint fp and fn fixes on real repos (#59) 
* feat: Enhance data exfiltration detection with source sensitivity gating for cookies and headers

* feat: Implement cross-file data exfiltration detection with parameter-specific gate filters

* feat: Add calibration tests and refine DATA_EXFIL severity scoring logic

* feat: Introduce per-detector configuration for data exfiltration suppression

* feat: Enhance DATA_EXFIL findings with destination field tracking in diagnostics and SARIF output

* feat: Add tainted body and URL handling for data exfiltration detection

* feat: Add integration tests and fixtures for DATA_EXFIL and SSRF detection in Go

* feat: Add Java integration tests and fixtures for DATA_EXFIL detection across multiple HTTP clients

* feat: Add synthetic externals handling for closure-captured variables in SSA

* feat: Implement closure-based suppression for resource leak findings

* feat: Add regression guards for shell-injection and taint propagation in for-of destructure patterns

* feat: Implement constructor cap narrowing for data exfiltration detection in HTTP request builders

* feat: Add gated sinks for data exfiltration detection in C and C++ using curl_easy_setopt

* feat: Implement DATA_EXFIL cap parity for backwards analysis and add integration tests

* feat: Add data exfiltration sinks for various languages and enhance documentation

* refactor: Simplify formatting and improve readability in various files

* refactor: Improve readability by simplifying conditional statements and adding clippy linting

* docs: Update CHANGELOG and comments for data exfiltration features and configuration

* docs: Clarify configuration instructions for data exfiltration trusted destinations

* docs: Enhance comments for evidence routing logic in data exfiltration
2026-05-01 10:59:52 -04:00
..
alias_no_sanitize_unsafe.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
alias_no_sanitize_unsafe.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
alias_sanitize_propagation.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
alias_sanitize_propagation.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
array_push_data_exfil.expect.json Added Cap::DATA_EXFIL and taint fp and fn fixes on real repos (#59) 2026-05-01 10:59:52 -04:00
array_push_data_exfil.js Added Cap::DATA_EXFIL and taint fp and fn fixes on real repos (#59) 2026-05-01 10:59:52 -04:00
array_push_safe.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
array_push_safe.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
array_push_taint.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
array_push_taint.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
await_fetch_data_exfil.expect.json Added Cap::DATA_EXFIL and taint fp and fn fixes on real repos (#59) 2026-05-01 10:59:52 -04:00
await_fetch_data_exfil.js Added Cap::DATA_EXFIL and taint fp and fn fixes on real repos (#59) 2026-05-01 10:59:52 -04:00
axios_post_body_safe.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
axios_post_body_safe.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
axios_post_url_fires.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
axios_post_url_fires.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
callback_return_taint.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
callback_return_taint.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
callback_sink_tracking.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
callback_sink_tracking.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
catch_param_sink.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
catch_param_sink.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
chained_promise_xss.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
chained_promise_xss.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
closure_captured_var.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
closure_captured_var.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
closure_member_assignment.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
closure_member_assignment.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
cmdi_express.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
cmdi_express.js Phase 1 (#33) 2026-02-25 21:16:36 -05:00
constructor_cap_narrow_safe.expect.json Added Cap::DATA_EXFIL and taint fp and fn fixes on real repos (#59) 2026-05-01 10:59:52 -04:00
constructor_cap_narrow_safe.js Added Cap::DATA_EXFIL and taint fp and fn fixes on real repos (#59) 2026-05-01 10:59:52 -04:00
container_direct_sink.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
container_direct_sink.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
container_index_dynamic_fallback.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
container_index_dynamic_fallback.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
container_index_load_precision.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
container_index_load_precision.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
container_index_store_isolation.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
container_index_store_isolation.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
context_sensitive_call.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
context_sensitive_call.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
deep_nested_closure.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
deep_nested_closure.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
destructure_object_taint.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
destructure_object_taint.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
destructure_sanitized_safe.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
destructure_sanitized_safe.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
destructuring_taint.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
destructuring_taint.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
dom_xss.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
dom_xss.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
equality_narrowing_propagates.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
equality_narrowing_propagates.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
equality_narrowing_safe.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
equality_narrowing_safe.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
eval_user_input.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
eval_user_input.js Phase 1 (#33) 2026-02-25 21:16:36 -05:00
express_redirect.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
express_redirect.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
express_xss.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
express_xss.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
feasible_range_check.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
feasible_range_check.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
fetch_object_url_tainted_fires.expect.json Python fp and docs updtes (#58) 2026-04-29 19:53:34 -04:00
fetch_object_url_tainted_fires.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
fetch_session_forward.expect.json Added Cap::DATA_EXFIL and taint fp and fn fixes on real repos (#59) 2026-05-01 10:59:52 -04:00
fetch_session_forward.js Added Cap::DATA_EXFIL and taint fp and fn fixes on real repos (#59) 2026-05-01 10:59:52 -04:00
fetch_tainted_body_safe.expect.json Added Cap::DATA_EXFIL and taint fp and fn fixes on real repos (#59) 2026-05-01 10:59:52 -04:00
fetch_tainted_body_safe.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
field_overwrite_safe.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
field_overwrite_safe.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
field_partial_taint.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
field_partial_taint.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
field_safe_overwrite_base_tainted.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
field_safe_overwrite_base_tainted.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
field_taint_propagation.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
field_taint_propagation.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
field_write_base_sink.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
field_write_base_sink.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
global_var_taint.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
global_var_taint.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
got_post_body_safe.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
got_post_body_safe.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
got_tainted_url_fires.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
got_tainted_url_fires.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
header_extract_shift.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
header_extract_shift.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
heap_alias_taint.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
heap_alias_taint.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
heap_reassign_safe.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
heap_reassign_safe.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
http_request_tainted_host_fires.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
http_request_tainted_host_fires.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
iife_tainted.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
iife_tainted.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
infeasible_equality_check.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
infeasible_equality_check.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
infeasible_range_check.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
infeasible_range_check.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
infeasible_relational_check.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
infeasible_relational_check.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
inline_return_mixed.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
inline_return_mixed.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
inline_return_no_leak.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
inline_return_no_leak.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
inline_return_passthrough.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
inline_return_passthrough.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
internal_redirect_safe.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
internal_redirect_safe.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
interproc_container_return.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
interproc_container_return.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
interproc_container_store.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
interproc_container_store.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
interproc_new_container_safe.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
interproc_new_container_safe.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
length_in_template_safe.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
length_in_template_safe.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
local_escape_html_safe.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
local_escape_html_safe.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
loop_counter_widening.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
loop_counter_widening.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
method_chain_taint.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
method_chain_taint.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
multi_source_single_sink.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
multi_source_single_sink.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
nested_callback_taint.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
nested_callback_taint.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
numeric_attr_safe.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
numeric_attr_safe.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
open_redirect.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
open_redirect.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
open_redirect_unsafe.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
open_redirect_unsafe.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
parse_from_string_xss.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
parse_from_string_xss.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
path_traversal_fs.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
path_traversal_fs.js Phase 1 (#33) 2026-02-25 21:16:36 -05:00
permission_mask_gate.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
permission_mask_gate.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
phi_must_validation_regression.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
phi_must_validation_regression.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
proto_pollution.expect.json Phase 1 (#33) 2026-02-25 21:16:36 -05:00
proto_pollution.js Phase 1 (#33) 2026-02-25 21:16:36 -05:00
reassignment_compound.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
reassignment_compound.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
reassignment_conditional.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
reassignment_conditional.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
reassignment_taint.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
reassignment_taint.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
receiver_taint_resolved.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
receiver_taint_resolved.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
relational_feasible_check.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
relational_feasible_check.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
safe_constant_args.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
safe_constant_args.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
safe_hardcoded_exec.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
safe_hardcoded_exec.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
safe_he_encode.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
safe_he_encode.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
safe_int_bounded.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
safe_int_bounded.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
safe_no_source.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
safe_no_source.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
safe_reassigned_const.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
safe_reassigned_const.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
safe_sanitized_flow.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
safe_sanitized_flow.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
safe_ssrf_allowlist.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
safe_ssrf_allowlist.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
safe_ssrf_axios_hardcoded.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
safe_ssrf_axios_hardcoded.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
safe_ssrf_hardcoded.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
safe_ssrf_hardcoded.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
safe_ssrf_prefix.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
safe_ssrf_prefix.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
safe_validated_input.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
safe_validated_input.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
scope_shadow_precision.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
scope_shadow_precision.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
session_destroy_safe.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
session_destroy_safe.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
session_destroy_with_query.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
session_destroy_with_query.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
set_attribute_xss.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
set_attribute_xss.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
sqli_concat.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
sqli_concat.js Phase 1 (#33) 2026-02-25 21:16:36 -05:00
sqli_mixed_parameterized.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
sqli_mixed_parameterized.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
sqli_mysql_query.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
sqli_mysql_query.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
sqli_parameterized_edge_cases.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
sqli_parameterized_edge_cases.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
sqli_pg_client.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
sqli_pg_client.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
sqli_sequelize_raw.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
sqli_sequelize_raw.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
ssrf_axios_bare.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
ssrf_axios_bare.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
ssrf_fetch.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
ssrf_fetch.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
ssrf_got.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
ssrf_got.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
ssrf_multihop.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
ssrf_multihop.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
ssrf_undici.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
ssrf_undici.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
string_concat_sink.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
string_concat_sink.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_encoding_html_xss.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_encoding_html_xss.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_encoding_wrong_type.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_encoding_wrong_type.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_exception_catch_taint.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_exception_catch_taint.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_exception_finally_safe.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_exception_finally_safe.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_exception_scope_taint.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_exception_scope_taint.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_expression_tree.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_expression_tree.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_field_nested.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_field_nested.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_field_propagation_regression.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_field_propagation_regression.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_field_taint.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_field_taint.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_interproc_budget_exhaustion.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_interproc_budget_exhaustion.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_interproc_callee_internal_sink.expect.json Prerelease cleanup (#46) 2026-04-29 00:58:38 -04:00
symex_interproc_callee_internal_sink.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_interproc_callee_sanitize.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_interproc_callee_sanitize.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_interproc_heap_mutation.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_interproc_heap_mutation.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_interproc_multi_return.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_interproc_multi_return.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_interproc_mutual_recursion.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_interproc_mutual_recursion.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_interproc_nested_depth3.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_interproc_nested_depth3.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_interproc_passthrough.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_interproc_passthrough.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_interproc_recursive.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_interproc_recursive.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_loop_exit_correct.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_loop_exit_correct.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_loop_infinite.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_loop_infinite.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_loop_inner_sink.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_loop_inner_sink.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_loop_multi_exit.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_loop_multi_exit.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_loop_nested.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_loop_nested.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_loop_post_sink.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_loop_post_sink.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_loop_taint_survives.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_loop_taint_survives.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_multipath.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_multipath.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_nested_expr.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_nested_expr.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_phi_merge.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_phi_merge.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_smt_infeasible.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_smt_infeasible.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_string_chain.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_string_chain.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_string_replace_xss.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_string_replace_xss.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_witness_cmdi.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_witness_cmdi.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_witness_sqli.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_witness_sqli.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_witness_xss.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
symex_witness_xss.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
telemetry_user_agent_fp.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
telemetry_user_agent_fp.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
template_literal_xss.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
template_literal_xss.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
ternary_both_branches_sanitized_safe.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
ternary_both_branches_sanitized_safe.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
ternary_literal_branches_safe.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
ternary_literal_branches_safe.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
ternary_one_branch_tainted.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
ternary_one_branch_tainted.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
ternary_taint.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
ternary_taint.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
try_catch_taint.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
try_catch_taint.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
typeof_guard_eval.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
typeof_guard_eval.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
unsafe_bitwise_or.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
unsafe_bitwise_or.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
unsafe_he_no_encode.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
unsafe_he_no_encode.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
unsafe_ssrf_scheme_only.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
unsafe_ssrf_scheme_only.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
unsafe_string_bounded.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
unsafe_string_bounded.js Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
xss_res_send.expect.json Release/0.5.0 (#35) 2026-04-25 17:59:11 -04:00
xss_res_send.js Phase 1 (#33) 2026-02-25 21:16:36 -05:00