Javascript auditing support #20
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
…cript NPD extraction
…detection and tested auditing against microlight.js
…a dataflow analysis for Javascript
variables and removed detection of potentially nullable builtin functions
- Non local variable assignments are now considered as part of the propagation details. - Non local variable assignments are now considered as a side effect and all caller functions that invoked the non-local-changing function would be added to the worklist for dataflow anaysis. - Adjusted potential buggy path detection to include non local variable assignments. These changes enables Repoaudit to detect NPD styled bugs in Javascript that involves non local variables (see benchmark/Javascript/toy/NPD/case06.js for example).
…endent components in dfbscan agent
Contributor
|
@acezxn Thank you for your contribution. Please refactor the code and add your latest version before the merge. |
chengpeng-wang
approved these changes
Nov 20, 2025
Contributor
chengpeng-wang
left a comment
chengpeng-wang
left a comment
There was a problem hiding this comment.
We could merge it to js-audit branch first and then continue to pollsh it.
Contributor
|
@acezxn Please execute |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Added detection of Null Pointer Dereference (NPD) support for Javascript.